Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
It is great you are using the honour system to believe in apples promise to not track you but based on the described process, apple has all the pieces to track you. For most other people, they need more than a promise.

Apple say they're tracking you but only to "prevent fraud"... whatever that means :rolleyes:
 
The app would not KNOW they are not receiving your real email address and using the address provided they would still be able to communicate with you. They just wouldn't be able to sell your real email address to a 3rd party. So if that was their plan, I could imagine why they wouldn't want "Sign in with Apple", but I believe it is an equally valid argument that is why you don't want to give these companies your real email address.
I agree with your perspectives about being able to communicate with users without having their real email address but I think it would be easy for companies to know it is not your "direct" email address. From the screen shots in the article it looks like the Apple created email addresses used for forwarding messages use the domain "privaterelay.appleid.com" so it would be easy for a company / website to know they are not getting your actual email address.
 
  • Like
Reactions: FoxBJK
I think Sign in with Apple is a step in the wrong direction. While I consider Apple to be a good company I don't:

1. want any company to know what services I am using
2. want to place my login credentials in an internet service
3. make a single point (this Apple service) a so prominent target to be attacked

Since there are already (better) alternatives like FIDO2 (see Heise Security) that replace passwords with a pair of public/private encryption keys - even with the possibility to store the private key in a password manager app, I don't like this service at all.
Maybe it was driven by the intend to bind customers to the platform, what is understandable but not so good in the end.

Did you even read the article? It will only be required as an OPTION on sites that only allow log in with google, Facebook, Twitter, etc. credentials. (All three of your points apply to this scenario if you want to use sites that only allow log in this way. Your solution would not be applicable.) For Sites that have their own username/password access, it will not be a required OPTION. (you can do whatever you want in this case including your solutionThis

You can continue to log in using Facebook credentials on sites that don’t have their own username/password access, and you can continue to use your username/password for those that do.

People are lazy and also don’t want to keep up with variable password requirements. This is simply a more private way to enter sites without google and Facebook accumulating and selling your info.
 
Last edited:
The app would not KNOW they are not receiving your real email address and using the address provided they would still be able to communicate with you. They just wouldn't be able to sell your real email address to a 3rd party. So if that was their plan, I could imagine why they wouldn't want "Sign in with Apple", but I believe it is an equally valid argument that is why you don't want to give these companies your real email address.

They absolutely would know, because the email address will be completely random and will point to an Apple-controlled domain. It will be trivially easy for companies to detect if they were given one of these Apple-generated addresses.
 
Apple say they're tracking you but only to "prevent fraud"... whatever that means :rolleyes:
Well there is tracking, and then there is TRACKING! I'm sure they are, they just don't go around selling it to the highest bidder over and over and over again. I trust Apple much more than others and am ok with this.
 
I for one will not use the anonymous email feature. It is really stupid to suggest that all companies that use authentication don't need to know who you are.
[automerge]1569593154[/automerge]
I don’t care if a site can tell I use Apple. What I care about is security.
I highly doubt that. What you care about is some surface level illusion of security.
 
Weird. I see the ‘apps using your Apple ID’ after using it today but there is no trace of ‘Forward To’ under settings>your name>Name, Phone Numbers, Email.
The 'forward to' seems to appear only when you choose to hide your real email address and a fake one is created to be sent to the website or app you signed into (which is what I did, by the way). Otherwise, if you did choose to reveal your real email address, it doesn't really make sense to have the 'forward to' section in your Apple ID settings since no email forwarding is taking place.
 
  • Like
Reactions: ATC
I think I must have missed something: can’t see any of the options mentioned in the article in my Settings (iOS 13.1, XS Max).
 
The 'forward to' seems to appear only when you choose to hide your real email address and a fake one is created to be sent to the website or app you signed into (which is what I did, by the way). Otherwise, if you did choose to reveal your real email address, it doesn't really make sense to have the 'forward to' section in your Apple ID settings since no email forwarding is taking place.
Thanks. That makes sense. I signed in with Apple for an app in iOS, there was no option to hide my email. I assume this will be an option when I sign in on the web instead of in an app.
 
Thanks. That makes sense. I signed in with Apple for an app in iOS, there was no option to hide my email. I assume this will be an option when I sign in on the web instead of in an app.
Perhaps. When I tested sign in with apple, I did it on a website and got the option to hide my email. I haven’t tested in an app yet because I had a hard time just finding anywhere to try sign in with apple, and I found the website where I tested much sooner than any app supporting it. Hardly any apps or websites are supporting sign in with apple right now, and it will probably remain like that until next April when it becomes a requirement.
[automerge]1569602550[/automerge]
Every service apple has is copied from a competitor. Spotify killer, Netflix killer, Dropbox killer.
Even the Apple Card. It closely resembles the card that Google Wallet used to have before it was merged with Android Pay to form the current Google Pay platform.
 
so it would be easy for a company / website to know they are not getting your actual email address.
Yes, absolutely true and not in dispute. However, the only legitimate reason for a company to want your email address is to communicate with you regarding the product - check, that issue is resolved. The only reason they would need your real email address is if they planned to do something with that address other than communicate, like sell it - that's the point of Sign in with Apple.

The post I was responding to originally stated that company's would not be happy not getting "real" email addresses and that is what I was replying to.
 
Last edited:
I used the service to sign into the Kayak app - it was intuitive, easy, seamless, and quick.
Do you already have an account with Kayak? Or did you use "Sign in with Apple" to create a new Kayak account.

I have an existing Kayak account, but it appears there is not away to change in Settings (similar with WordPress) to use/link "Sign in with Apple"?
 
  • Like
Reactions: picaman
Do you already have an account with Kayak? Or did you use "Sign in with Apple" to create a new Kayak account.

I have an existing Kayak account, but it appears there is not away to change in Settings (similar with WordPress) to use/link "Sign in with Apple"?

It's weird that under 'add social connections' when you are signed in they have Facebook, Google, etc but not Apple.
 
They absolutely would know, because the email address will be completely random and will point to an Apple-controlled domain. It will be trivially easy for companies to detect if they were given one of these Apple-generated addresses.
I wrote that the app would not know. You write that "they" would know. Terminator was a movie, machines are not yet cognizant and referring to applications or machines as "they" is premature and perhaps a little paranoid.

Now, if you are referring to the people who write the apps, you are right in that if they look they will see an email address that they would likely recognize is not a person's main email address. But why should they care? It works to communicate with which is the sole legitimate purpose for them asking for any email address in the first place. The only reason they would care that it is not your actual day-to-day email address is they couldn't monetize the address they have, which is a significant feature of Sign in with Apple.

So, why is it that "they" care?
 
Do you already have an account with Kayak? Or did you use "Sign in with Apple" to create a new Kayak account.

I have an existing Kayak account, but it appears there is not away to change in Settings (similar with WordPress) to use/link "Sign in with Apple"?

I’m not sure if I ever had an account or not. I had the app on my phone and I was signed out and had the option. Did you sign out in the app and try logging in?
 
"In an app that supports Sign in with Apple" Is the operative here.

Why would apps support a feature that hides your email ?

Because doing so reduces their liability in a data breach. I would guess that literally _most_ businesses would love this. They are not in the business of selling your email, and would happily not even collect it. Sony, Target, any smaller firm that's had a high profile data breach, they'd all happily let Appple carry that weight.
 
  • Like
Reactions: bkaus
Because doing so reduces their liability in a data breach. I would guess that literally _most_ businesses would love this. They are not in the business of selling your email, and would happily not even collect it. Sony, Target, any smaller firm that's had a high profile data breach, they'd all happily let Appple carry that weight.
Yes, for example the Words with Friends people would have benefitted greatly.

Is there a list anywhere of website and/or apps that support this yet?
 
I like how this nonsense is posted even though the article says nothing is tracked.
When you login without typing in a password, where do you think the authentication credentials are coming from? Most likely from apples servers. What is preventing apple from looking at their own server logs to see when and where that info is going?
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.