We recently disclosed three WebKit issues that can leak a user’s DNS traffic or reveal their real IP address, even when the browser is configured to route traffic through a proxy. The issues affected our own browser, Psylo, Apple’s iCloud Private Relay, and other proxy-based browsers on iOS, including Tor browsers such as Onion Browser. Our decision to disclose the issues publicly before informing Apple sparked some debate about responsible disclosure, so we want to explain the reasoning behind our decision and share our broader thoughts on responsible disclosure.