8 ms·

There's two kinds of "obfuscation" at play with Sign In With Apple. One is true obfuscation - "hide my email". That would be a poor choice for use with any app

There's two kinds of "obfuscation" at play with Sign In With Apple. One is true obfuscation - "hide my email". That would be a poor choice for use with any app you hope to have an ongoing relationship with, I'd think. The other is just the use of iCloud email addresses, detailed in the post, which seemed like a very good and concerning point. It's also much less likely to be a problem with FB or Google login.

crooked-v 6y ago
Your primary iCloud email address is meant to just be your main email address, including non-Apple email addresses.
- imron 6y ago
  "Meant to" doesn't mean "is", and even if 99% of people do what they are "meant to", that still leaves millions of people doing it the "wrong" way.
  - Firehawke 6y ago
    Yep. I rarely run into people who use their iCloud email, and that goes for both the technically inclined and the average users. Locking things down like this seems to have some serious negatives that Apple needs to reconsider their approach for.
    - gemvox 6y ago
      But you don't need to have your iCloud mail set as the primary mail for your AppleID. You don't even need to create an iCloud mail when you create an iCloud/AppleID account, it's an optional step. I recently created another iCloud test account and it's also not shoved in your face or anything, it's a small little button called "Don't have an email address?" somewhere. So I don't even really understand how people get into this situation.
bradleybuda 6y ago
I can have an ongoing relationship with an app without that app’s developer having an ongoing relationship with my inbox.
- JAlexoid 6y ago
  Sure you can. But they explain why it's not applicable for their use case. And I would literally blow up at Apple, if they forced this on TripIt... Sharing trip information is done using registered email. And iCloud email is crap.
  - jessaustin 6y ago
    Sharing trip information is done using registered email. Could you provide any details? How is such "registered" email different than any other email?
    - CiaranMcNulty 6y ago
      "by using the email account you registered with"
      - whynaut 6y ago
        not GP but like, ok, why can’t that be sent from any other email (user-provided or otherwise)?
        thomaslord 6y ago
        My guess is that it's being send to the email the user registered with. And requiring them to provide a separate email from the one they registered with completely defeats the purpose of obfuscating the email in the first place, so I think it'd be unreasonable to ask a developer to implement a whole second place to put an email just to work around Apple denying access to that information in the first place. At the very least Sign in with Apple needs to support a request for the user to enter the real email they want to use to be contacted by the app after-the-fact for cases where someone obfuscates their email but then wants access to functionality that explicitly requires their real email.

crooked-v 6y ago

Your primary iCloud email address is meant to just be your main email address, including non-Apple email addresses.

imron 6y ago
"Meant to" doesn't mean "is", and even if 99% of people do what they are "meant to", that still leaves millions of people doing it the "wrong" way.
- Firehawke 6y ago
  Yep. I rarely run into people who use their iCloud email, and that goes for both the technically inclined and the average users. Locking things down like this seems to have some serious negatives that Apple needs to reconsider their approach for.
  - gemvox 6y ago
    But you don't need to have your iCloud mail set as the primary mail for your AppleID. You don't even need to create an iCloud mail when you create an iCloud/AppleID account, it's an optional step. I recently created another iCloud test account and it's also not shoved in your face or anything, it's a small little button called "Don't have an email address?" somewhere. So I don't even really understand how people get into this situation.

bradleybuda 6y ago

I can have an ongoing relationship with an app without that app’s developer having an ongoing relationship with my inbox.

JAlexoid 6y ago
Sure you can. But they explain why it's not applicable for their use case. And I would literally blow up at Apple, if they forced this on TripIt... Sharing trip information is done using registered email. And iCloud email is crap.
- jessaustin 6y ago
  Sharing trip information is done using registered email. Could you provide any details? How is such "registered" email different than any other email?
  - CiaranMcNulty 6y ago
    "by using the email account you registered with"
    - whynaut 6y ago
      not GP but like, ok, why can’t that be sent from any other email (user-provided or otherwise)?
      - thomaslord 6y ago
        My guess is that it's being send to the email the user registered with. And requiring them to provide a separate email from the one they registered with completely defeats the purpose of obfuscating the email in the first place, so I think it'd be unreasonable to ask a developer to implement a whole second place to put an email just to work around Apple denying access to that information in the first place. At the very least Sign in with Apple needs to support a request for the user to enter the real email they want to use to be contacted by the app after-the-fact for cases where someone obfuscates their email but then wants access to functionality that explicitly requires their real email.