Photo by Hadrian / Shutterstock.com
Google is set to launch an IP Protection feature for its Chrome web browser, aiming to bolster user privacy by concealing their IP addresses through proxy servers.
This development is a response to growing concerns over the potential misuse of IP addresses for clandestine tracking purposes.
The IP Protection feature will reroute third-party traffic from specific domains through proxy servers, rendering users’ IP addresses invisible to these domains. The solution will evolve alongside the digital landscape, continually expanding its domain coverage to safeguard users against cross-site tracking.
Google plans to test the IP Protection feature between Chrome versions 119 and 225
IP addresses serve a crucial role in the functioning of the internet, facilitating tasks such as routing web traffic and ensuring network security. However, they have also become tools for covert tracking, enabling websites and online services to create detailed user profiles. Unlike third-party cookies, which users can manage, IP addresses currently lack a direct means of evasion, raising significant privacy risks.
Initially, the IP Protection feature will be optional, putting users in control of their privacy while enabling Google to monitor trends. The rollout will be gradual to accommodate regional considerations and ensure a smooth learning curve.
The initial phase, referred to by Google as ‘Phase 0’, will involve Google routing requests to its domains through proprietary proxies. Access will be limited to users logged into Google Chrome with US-based IP addresses. A select group of clients will be automatically included in the testing, with architecture and design adjustments planned as testing progresses.
To mitigate misuse, Google will employ an authentication server to distribute access tokens to the proxy, setting a quota for each user. Future phases will introduce a 2-hop proxy system to enhance privacy further.
Notably, the IP addresses assigned to proxy connections will represent only a ‘coarse’ user location instead of specific geographic details, addressing concerns related to GeoIP-based services.
Potential security concerns
However, potential security concerns exist. Routing traffic through Google’s servers may complicate security and fraud protection efforts, potentially impeding the detection of DDoS attacks and fraudulent activities. In the event of a compromise to one of Google’s proxy servers, threat actors could access and manipulate traffic.
To address these challenges, Google is considering user authentication with the proxy, measures to prevent proxies from linking web requests to specific accounts, and introducing rate limiting to thwart DDoS attacks.
In the News: Grandoreiro banking malware targets Spanish netizens: Research
