4 ms·

I think removing the IDFA is great but .... most people probably login via the same IDs, either the same email address or facebook login, google login, github l

I think removing the IDFA is great but .... most people probably login via the same IDs, either the same email address or facebook login, google login, github login, etc... Once you've done that your app activity will be exchanged behind the scenes associating your data with your email or account so I'm not sure how many people this is going to really help. IIRC Apple was trying to fix this hole too by having login via Apple give each app a different user IDs. Unfortunately that's not useful for the majority of people who need to be able to use non Apple devices.

floatingatoll 6y ago
Apple doesn’t need to fix this for users who aren’t using Apple devices. However: The privacy feature of “Sign In With Apple” uses an email address for each service that you can use to access your accounts from other non-Apple devices, as long as the site implements a Reset Password process that accepts account email addresses (which virtually all do). The private email addresses are under Settings > iCloud > Apps Using Apple ID for apps where you hide your email.
- gfxgirl 6y ago
  You're assuming people use exclusively Apple devices. I'm assuming people have a mix like a Window machine at work or a Chromebook from school etc.... I can use Apple devices and still have the need to use non-apple devices so Apple's solution isn't helpful.
  - floatingatoll 6y ago
    If you have enough Apple devices to set up and configure Sign In With Apple, and you're interested in using the account with non-Apple devices, then using the Reset Password process to have a password assigned to your account generally has not — in my experience — impacted Sign In With Apple, which simply continues to work regardless. I have been able to use this process to sign in across Apple and Windows and etc without difficulty. What's uncertain here is whether each third-party will correctly handle this workflow. I can't decide if it's worked every time because I'm lucky or because there's a regulation somewhere in the Sign In With Apple terms that requires it. I respect that this uncertainty may not be acceptable to everyone.

floatingatoll 6y ago

Apple doesn’t need to fix this for users who aren’t using Apple devices. However: The privacy feature of “Sign In With Apple” uses an email address for each service that you can use to access your accounts from other non-Apple devices, as long as the site implements a Reset Password process that accepts account email addresses (which virtually all do). The private email addresses are under Settings > iCloud > Apps Using Apple ID for apps where you hide your email.

gfxgirl 6y ago
You're assuming people use exclusively Apple devices. I'm assuming people have a mix like a Window machine at work or a Chromebook from school etc.... I can use Apple devices and still have the need to use non-apple devices so Apple's solution isn't helpful.
- floatingatoll 6y ago
  If you have enough Apple devices to set up and configure Sign In With Apple, and you're interested in using the account with non-Apple devices, then using the Reset Password process to have a password assigned to your account generally has not — in my experience — impacted Sign In With Apple, which simply continues to work regardless. I have been able to use this process to sign in across Apple and Windows and etc without difficulty. What's uncertain here is whether each third-party will correctly handle this workflow. I can't decide if it's worked every time because I'm lucky or because there's a regulation somewhere in the Sign In With Apple terms that requires it. I respect that this uncertainty may not be acceptable to everyone.