Real-time, privacy-preserving URL protection

Google is upgrading Chrome’s Safe Browsing Standard protection to perform real-time, privacy-preserving URL checks by encrypting URL hash prefixes and routing them via a Fastly-operated Oblivious HTTP privacy server, preventing Google from linking IP addresses to browsing activity. Server-side lists enable rapid inclusion of newly discovered unsafe sites, while local/global caches, fallback to hash-based checks, and planned asynchronous loading mitigate latency. The feature is on by default across desktop, Android, and iOS, manageable via the SafeBrowsingProxiedRealTimeChecksAllowed policy for enterprises, with future availability planned through a Safe Browsing API for eligible developers.