When I go to https://leaks.psylo.app on "Possible IP leaks" side I see only "WebAuthn" with my real IP and, occasionally, WebTransport with an incorrect IP. For "HTTPS Traffic" it always show some other relay. Using Safari 26.5
I'm not sure what would I use WebAuthn for, if ever, maybe I could disable it through "Feature Flags" menu?; regardless, I never treat Apple's services as "premium", since the email fingerprinting thing. I pay mainly for Hide My Email, just to organise things per domain, and it's cheap.
Webauthn is the api for Passkeys and things.
So WebAuthn leaks real IPs, who would have thought!
Depends on the browser apparently? Only on Webkit is what it says, it’s not clear if the site doesn’t support FF, or if FF is secure.
WebKit passes the request to a separate system process.
On Mac, Firefox and Chrome, which don't use WebKit, handle WebAuthn themselves.
Yeah. For authentication. It's important that the large tech company knows who you are.
Yes, who would've thought Passkeys are a bad idea.
Now for yet another reason.
It’s more than just Passkeys, Webauthn is super convenient with my YubiKeys, I even have it set up as 2FA on some selfhosted services.