5 ms·

So, the Amazon app doesn't get this warning, even though it also only uses "external purchases", because somehow according to Apple it's only unsafe for digital

So, the Amazon app doesn't get this warning, even though it also only uses "external purchases", because somehow according to Apple it's only unsafe for digital goods? Give me a break..

Avamander 1y ago
Well, to be a devil's advocate here a second, Amazon can probably be trusted more with using their own payment system. With random apps there's really no good indication that the system they use is okay. It's not like you can see a legit URL bar or anything in apps.
- goosedragons 1y ago
  Apple has always allowed physical good sellers to use external payment systems. Even complete nobodies you've never heard of. It's always made their rules seem ridiculous IMO.
  - Avamander 1y ago
    There's a vast difference in scale though? Those complete nobodies probably don't get as many transactions as all the "F2P" slopware games do.
    - goosedragons 1y ago
      Why does scale matter? I thought it was about "security". You only need to pretend to send me a t-shirt once to steal my card info. There's also nobodies in the F2P game space just as their are giants in the retail app space like Amazon.
      - Avamander 1y ago
        Exactly, one needs to pretend just once, giving scammers significantly more opportunities like that is thus bad.
- klabb3 1y ago
  Yes you can. On iPhone the recommend ”secure webview” shows the domain name in bold at the top. In general, this embedded webview seems very easily spoofable to me, but that’s a separate problem. Both Android and Apple have determined this is the most secure way to auth against third parties. It’s the standard way to sign in with oauth etc.
  - Avamander 1y ago
    > In general, this embedded webview seems very easily spoofable to me, but that’s a separate problem. Both Android and Apple have determined this is the most secure way to auth against third parties. It’s the standard way to sign in with oauth etc. Which I also despise.
- lapcat 1y ago
  This has nothing to do with the trustworthiness of the app and everything to do with the European Union Digital Markets App mandate. Every app that's using the new EU rules is getting the warning. Indeed the warning has a link to the document "About alternative payment options on the App Store in the European Union" https://apps.apple.com/ie/story/id1726640865 https://apps.apple.com/ie/story/id1726640865
- archagon 1y ago
  OK. And what is the process for me, Joe Indie Dev, to get the same kind of white glove treatment? (If the answer is “play golf with an Apple exec,” then it’s no wonder that the company is losing so disasterously in courts around the world.)

So, the Amazon app doesn't get this warning, even though it also only uses "external purchases", because somehow according to Apple it's only unsafe for digital goods? Give me a break..

Avamander 1y ago

Well, to be a devil's advocate here a second, Amazon can probably be trusted more with using their own payment system. With random apps there's really no good indication that the system they use is okay. It's not like you can see a legit URL bar or anything in apps.

goosedragons 1y ago
Apple has always allowed physical good sellers to use external payment systems. Even complete nobodies you've never heard of. It's always made their rules seem ridiculous IMO.
- Avamander 1y ago
  There's a vast difference in scale though? Those complete nobodies probably don't get as many transactions as all the "F2P" slopware games do.
  - goosedragons 1y ago
    Why does scale matter? I thought it was about "security". You only need to pretend to send me a t-shirt once to steal my card info. There's also nobodies in the F2P game space just as their are giants in the retail app space like Amazon.
    - Avamander 1y ago
      Exactly, one needs to pretend just once, giving scammers significantly more opportunities like that is thus bad.
klabb3 1y ago
Yes you can. On iPhone the recommend ”secure webview” shows the domain name in bold at the top. In general, this embedded webview seems very easily spoofable to me, but that’s a separate problem. Both Android and Apple have determined this is the most secure way to auth against third parties. It’s the standard way to sign in with oauth etc.
- Avamander 1y ago
  > In general, this embedded webview seems very easily spoofable to me, but that’s a separate problem. Both Android and Apple have determined this is the most secure way to auth against third parties. It’s the standard way to sign in with oauth etc. Which I also despise.
lapcat 1y ago
This has nothing to do with the trustworthiness of the app and everything to do with the European Union Digital Markets App mandate. Every app that's using the new EU rules is getting the warning. Indeed the warning has a link to the document "About alternative payment options on the App Store in the European Union" https://apps.apple.com/ie/story/id1726640865 https://apps.apple.com/ie/story/id1726640865
archagon 1y ago
OK. And what is the process for me, Joe Indie Dev, to get the same kind of white glove treatment? (If the answer is “play golf with an Apple exec,” then it’s no wonder that the company is losing so disasterously in courts around the world.)