Apple: We're not handing over Safari URLs to Tencent, just IP addresses
In case you only read the headline, it was confirmed to only happen if the device's region was set to China. From the statement:<p>>  To accomplish this task, Safari receives a list of websites known to be malicious from Google, and for devices with their region code set to mainland China, it receives a list from Tencent.<p>From Apple's statement, Tencent's API functions exactly the same as Google's k-anonymity model, which you can read more about the api[0] and how it works[1]  (also via this JAMIA paper[2]).<p>0: <a href="https://developers.google.com/safe-browsing/v4/update-api#checking-urls" rel="nofollow">https://developers.google.com/safe-browsing/v4/update-api#ch...</a><p>1: <a href="https://blog.cloudflare.com/validating-leaked-passwords-with-k-anonymity/" rel="nofollow">https://blog.cloudflare.com/validating-leaked-passwords-with...</a><p>2: <a href="https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2528029/" rel="nofollow">https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2528029/</a>