Note privacy implications of GrapheneOS proxy services

The GrapheneOS proxies are different depending on connection.

Some just pass an encrypted blob onward to Google, others can actually see the contents of the request, others are just downloading a static file with no information from client.

  • connectivity check is just a static request/response from their server
  • the time request piggy backs on the connectivity check requests
  • the remote provisioning proxy passes an encrypted payload to/from Google
  • the psds proxy just proxies static files from broadcom/samsung/qualcomm
  • the vanadium proxy just proxies static files from google
  • the supl proxy however can let them see the contents of the supl request
2 Likes