9 ms·
Can’t services just disallow/block this address? Fun thing is, Apple themselves block name+addon@gmail.com addresses when using their dev console. You can bet
by dyarosla 7y ago
Can’t services just disallow/block this address?
Fun thing is, Apple themselves block name+addon@gmail.com addresses when using their dev console. You can bet that some companies will disallow Apple’s signature private passwords similarly if they can, in the name of ‘security’ or what have you.
Or am I being too cynical? Feel free to CMV.
EDIT: best response addressing this seems to be ‘The addresses are only generated from the "Sign In With Apple" workflow that a developer has to enable in the first place’
- wvenable 7y agoNo, you're clearly correct. But Apple pushing this does give it a sense of legitimacy and blocking signups from this service might just cause less signups than actually forcing people to use their real address. If Apple makes this extremely user friendly and quick to use than blocking it will cause a loss of signups.
- dyarosla 7y agoDevils advocate: ‘Error: We love Apple and anonymity but we require a real email address to prevent fraud and to properly secure your account. Please enter your real email address.’
- untog 7y agoThen you get kicked out of the App Store. (potentially)
- saagarjha 7y agoThis sounds like a way to get your app rejected for abusing APIs.
- dyarosla 7y agoIn an app I agree. On a website signup however..?
- apetresc 7y agoIt would work roughly the same way. Integrating an OAuth provider like this requires registering an application with revokable ClientIDs, so Apple can technically pull them just as easily as they can pull Apps. (It remains to be seen if they'll put in the legwork to actually police these things, though)
- mediocrejoker 7y agoThis is going to be a tough sell to your marketing dept I think.
- kelnos 7y agoPresumably Apple won't let just anyone put the "Sign in With Apple" button on their website, or will at least have a method of blocking bad actors.
- nprateem 7y ago> ‘Error: We love Apple and anonymity but we require a real email address to prevent fraud and to properly secure your account. Please enter your real email address.’ GDPR would probably want to know specifically why you need someone's real email address.
- gowld 7y agoYes. Back when Google+ oauth launched, "sharing user identity info" was the carrot that incentivized developers to build the integration. Otherwise, devs preferred Facebook so they could get user info.
- untog 7y agoPresumably such services won't implement Sign In With Apple in the first place. People will accept it because they want the sheer quantity of users Apple provides. The useful thing about Apple is that they can force people to do things they don't particularly want to do, like accept anonymous e-mail addresses or stop using Flash. (unfortunately this is also the bad thing about Apple)
- bichiliad 7y agoOne other thing that seems powerful is that users that use Sign In With Apple have some guarantee of quality; with Apple using FaceId to authenticate, there's some amount of guarantee that you're not a bot.
- infectoid 7y agoI think this is something that people are missing when they suggest services will just block the Apple relay address. Of course they wont. They still want the business and as you've pointed out, these accounts will be in a different customer engagement category. They are almost certainly real people and they a lot of value to marketers, even is you don't have all of their other personal details.
- repolfx 7y agoSince when do Apple IDs require 3-D cameras to log in to? Mine only needs a password. I don't think my MacBook even does 3D face recognition.
- dfabulich 7y ago"[Sign In with Apple] will be required as an option for users in apps that support third-party sign-in when it is commercially available later this year." https://developer.apple.com/news/?id=06032019j https://developer.apple.com/news/?id=06032019j
- deleted 7y ago[deleted]
- 7y ago
- ckuhl 7y agoCompanies could absolutely disallow / block it. However they most likely won't for the same reason that people who are upset about Apple's 30% App Store cut still develop apps for iOS: they have their customers spend far more on average than other phone / OS users.
- tinus_hn 7y agoSo a company would put a sign in with Apple button in their app, but disallow you from using it?
- WAHa_06x36 7y agoWon't pass review.
- jdminhbg 7y agoThe addresses are only generated from the "Sign In With Apple" workflow that a developer has to enable in the first place, so it wouldn't make any sense to do that and then reject the addresses.
- donkeyd 7y agoSure, they really could. But for me, it could be a reason to pick Lyft over Uber for example. I hope they add support to the App Store description, that would really help filter apps.
- la_barba 7y agoBut in return for that, the services that choose to employ this will get a soft guarantee that the person signing up is unique/real. Its a way to get real-name/real-id with some amount of privacy.
- saltminer 7y agoApple IDs cannot guarantee a real or unique user - users can have multiple accounts (some users will create a second account by mistake, others have a separate work account, etc), users can share accounts (especially ones tied to generic email addresses), and there are people selling app store reviews, so some bad actors definitely have a lot of accounts.
- la_barba 7y agoThanks for your comment. I used the word soft guarantee, which is meant to encapsulate those caveats. Maybe I should have used a better term since I guess people were confused as to what it meant.
- colechristensen 7y agoFacebook is trending downwards and privacy concerns with Google are trending up. Critical mass might be achieved where if you don't include Apple Sign-In you might lose more users than whatever benefit you see from having more identifiable personal information.
- forrestthewoods 7y agoIt will be a battle of public relation. If Apple users use Apple Sign-In en masse then any services which blocks it will face harsh negative publicity. If enough people use it then services will have no choice but to acquiesce.
- mrtksn 7y agoThey surely can do whatever they want, they can definitely choose to deny service to users that are traditionally high spenders and limit the fake accounts to professional scammers that use account farms from Asia.
- mystcb 7y agoIs that block a recent thing? It might be different as for my on GSuite account I can add the name+addon@mydomain.com - it might just be a difference between the "public" Gmail system vs the Gsuite Gmail system. In which case, my question is completely invalid and feel free to ignore ;) Note: This comes from my own developer account having 3 name+addon@ accounts live, and working with things like ApplePay etc for testing.
- nexuist 7y agoDeveloper with a name+addon@gmail.com Apple ID here. No idea what OP is talking about, I was able to generate my Apple ID and sign up for the dev console no problem.
- tinus_hn 7y agoApple now strips the +... part when you create an ID. So if name@gmail.com is already in use, name+addon@gmail.com will be refused with the message that name@gmail.com is already an Apple ID.
- astrange 7y agoMy Apple ID is email+something@gmail.com and it works.
- SN76477 7y agothey can block it but when you have 90million people using it, why would you?