“Sign in with Apple” is said to contain security and data protection risks

This article may contain affiliate links. Learn more on our Partner Program page.

Apple introduced the “Sign in with Apple” feature at WWDC 2019 – the feature will be available for all applications with third-party login options on iPhone, iPad and Mac – Android and Windows users can also make use of it.

"Sign in with Apple" is intended to be an alternative to the Facebook and Google solutions. The function enables users to create a new account on suitable applications, websites and other services without revealing potentially sensitive private information - the main focus is on personal data protection. But that doesn't quite work - according to the OpenID Foundation. The OpenID Foundation is a non-profit organization. It consists of members such as PayPal, Google, Microsoft and other companies. The OpenID Foundation controls numerous universal login platforms with its OpenID Connect platform.

"OpenID Connect was developed by a diverse group of companies and industry experts within the OpenID Foundation (OIDF). OpenID Connect is a modern, widely adopted identity protocol based on OAuth 2.0 that enables third-party sign-in options in a standardized manner."

Apple should close the gap and become a member

In a public letter to Craig Federighi, the OpenID Foundation writes that Apple has "largely adopted" OpenID Connect for signing in to Apple, but there are some differences. According to the organization, these differences pose certain security and privacy risks. The current differences between OpenID Connect and "Sign in with Apple” generally limit the possibilities of the type of use, which causes greater security and data protection risks. The exact differences between OpenID Connect and Apple's platform are shown in detail here. It also presents an unnecessary problem for developers. By revising the system, Apple would be interoperable with the widely used OpenID Connect Relying Party software - according to the organization. The OpenID Foundation has made several demands of Apple. Firstly, the company should fix the problem and secondly, join the organization. (Photo by Unsplash)