Google is getting ready to test a new "IP Protection" feature for the Chrome browser that enhances users' privacy by masking their IP addresses using proxy servers.
Initially, IP Protection will be an opt-in feature, ensuring users have control over their privacy and letting Google monitor behavior trends.
The first phase, dubbed "Phase 0," will see Google proxying requests only to its own domains using a proprietary proxy. This will help Google test the system's infrastructure and buy more time to fine-tune the domain list.
To start, only users logged into Google Chrome and with US-based IPs can access these proxies.
http://github.com/GoogleChrome/ip-protection
https://groups.google.com/a/chromium.org/g/blink-dev/c/9s8ojrooa_Q
Among the domains where Google intends to test this feature are its own platforms like Gmail and AdServices.
Google plans on testing this feature between Chrome 119 and Chrome 225.
IP Protection Domain List Phase 0 Test
https://docs.google.com/document/d/1iCM3BxJ5cBVwepIL3L-ux-2eS-R0SgaCZEM_ja0ary4/edit
Potential security concerns
Google explains there are some #Cybersecurity concerns related to the new IP Protection feature.
As the traffic will be proxied through Google's servers, it may make it difficult for security and fraud protection services to block DDoS attacks or detect invalid traffic.
Furthermore, if one of Google's proxy servers is compromised, the threat actor can see and manipulate the traffic going through it.
#CoSoSec