Live data from Hacker News

How Popular Is “Sign in with Apple”?

daringfireball.net

81–90 of 340 posts

Re: How Popular Is “Sign in with Apple”?

#81
post #41

I tried to do a Sign in with Apple integration on Android (wanted the app to have the same options across platforms). Testing on Android was next to impossible. To test I needed an Apple ID with 2FA. But SMS 2FA was not good enough, you need the hardware-based 2FA. To get that you need a recent macOS or iOS device. As an Android developer I have no reason to own either of those. Eventually I just had a friend who own…

Not to be that guy but you can get a used iPhone SE for $75, and it should last you a couple years for testing purposes.

Re: How Popular Is “Sign in with Apple”?

#82
post #41

I tried to do a Sign in with Apple integration on Android (wanted the app to have the same options across platforms). Testing on Android was next to impossible. To test I needed an Apple ID with 2FA. But SMS 2FA was not good enough, you need the hardware-based 2FA. To get that you need a recent macOS or iOS device. As an Android developer I have no reason to own either of those. Eventually I just had a friend who own…

Apple continues to not give any care whatsoever to anything outside their walled garden. For the longest time you couldn't even preview songs on iTunes store without having iTunes. Want to watch their biggest WWDC live? Had to use Safari until last year. Obviously iMessage and FaceTime are complete no-gos outside their walled garden too. This is how they keep people in. They have to close down their walls as tightly…

For this and many examples I think it's more ignoring those use-cases than maliciously blocking them.

> For the longest time you couldn't even preview songs on iTunes store without having iTunes.

I'm confused what the use case for this is?

> Want to watch their biggest WWDC live? Had to use Safari until last year.

Keynote streaming has had a long, weird history over the past decades. Even when Quicktime was dominant, they would only occasionally stream it live. My understanding over the past decade or so has been they've used "standards" to stream, but just the standards Safari had implemented. I just don't think they cared that much about getting it to any home users live.

Re: How Popular Is “Sign in with Apple”?

#83

We have an on-going issue with Apple's protections going back almost a decade to when they started mucking about with 3rd Party Cookies. This isn't entirely their fault, blame also lies with the vendor we've chosen and our architecture for SSO. That being said, there are valid use cases for tracking users across websites. I work for a nonprofit that does fundraising using every imaginable PaaS or SaaS platform as wel…

I don't know about the plaforms you're working with, but I'm pretty sure 3rd party cookies shouldn't be necessary for OpenIDC. They certainly weren't for OpenID. If it's a problem, it's probably because of the specific platform intentionally did things in a way that was bad for user's privacy.

Unfortunately, non-profits I've seen tend to be really bad at privacy because they need to a) keep things cheap and b) have a significant presence on advertisement platforms.

Re: How Popular Is “Sign in with Apple”?

#84
The rollout for Sign in with Apple was a disaster when it came to email deliverability. They seem to have given zero thought to people who used third party email services like CustomerIO or Sendgrid, indicating that they "weren't supported," leaving those providers to scramble to meet the strict DKIM / SPF / Return-Path requirements. Not only that, but if you were sending from an appropriately aligned and verified domain, in the first couple of weeks, deliverability might take in upwards of 12 hours for receipt. I believe they've since improved on the deliverability and the third-party email providers have accommodated appropriately, with Apple even providing brief integration tips for the most popular ones, but it left a pretty horrible taste in our mouths as we were jumping through all the integration hoops.

EDIT: This is referring to email deliverability when attempting to contact private Apple relay addresses.

Re: How Popular Is “Sign in with Apple”?

#85

Earlier quoted context omitted.

Is there any good reason to do the Sign In With ? I never take that option if there is anything else available. They don't need to see my signins on other sites, why should I just give it to them? For a few sites where it is utterly unavoidable I make one-off twitter accounts instead, because Twitter doesn't require your phone number to make an account and doesn't have a "only one account per person" policy I think.

Login fatigue. Yes, I use a password manager (1password). But it means I need to stop going through the sign-up flow, jump over to the password manager, create a new login, change the password recipe from random-letter to random-word (which I prefer), generate a password, then go further modify it to accommodate the site's particular password complexity rules (upper/lower/special/numbers), add the URL, save, then go…

Hear hear. I’m amazed 1PW hasn’t defaulted to random word recipes by now, as well as providing checkboxes to fold in all the upper/number/special character rules, or min/max length. (My passwords usually look like this nowadays: “turtle megaphone house 6@B”)

Re: How Popular Is “Sign in with Apple”?

#86

Earlier quoted context omitted.

My understanding is that "Sign in With Apple" is still officially in beta; once it launches in full, all iOS apps that offer third-party sign ins (like the Google & Facebook options) will be mandated to also offer Apple's OAuth sign-in -- and must give it more prominent placement than third-party services.

>will be mandated to also offer Apple's OAuth sign-in -- and must give it more prominent placement than third-party services. That seems like an abuse of monopoly power.

Welcome to iOS development.

Re: How Popular Is “Sign in with Apple”?

#87
post #14

I've seen "Sign in with Apple" exactly once since iOS 13 launched. I am kind of surprised it's not being rolled out more widely. The first app I've seen and used it with was Byte (the Vine successor) over this past weekend.

Turns out it's only required if you already exclusively use FB/Google sign in (I thought it would also apply to your-app-auth+FB+G but I guess not) https://developer.apple.com/app-store/review/guidelines/#sig...

Huh, that was not my understanding, and your link goes on to state:

> not required if...Your app exclusively uses your company’s own account setup and sign-in systems.

So there’s no official guidance on the both/and case?

Re: How Popular Is “Sign in with Apple”?

#88

Earlier quoted context omitted.

Is there any good reason to do the Sign In With ? I never take that option if there is anything else available. They don't need to see my signins on other sites, why should I just give it to them? For a few sites where it is utterly unavoidable I make one-off twitter accounts instead, because Twitter doesn't require your phone number to make an account and doesn't have a "only one account per person" policy I think.

Well, Sign In with Apple is different because: 1. It’s fast 2. It gives you a pseudonym 3. It doesn’t leak all your other social graph data 4. Doesn’t require a new password The rest are: 1. Faster than creating an email, but will require redirects, and possibly logging into fb/google 2. May give you a pseudonym but often reveals your real name 3. Are used typically to build profiles of you and create stats on app po…

Maybe it's just me, but one bummer about this kind of system is that's is A+ top security for a lot of stuff I don't care about. To create some account on a random forum to give feedback about how I got a stuck oil filter off of my '03 Civic, for example. With email+password I can just use a low security password because I'm typing on a phone. With these all-in systems my device isn't recognized so I'll need to type in some code from 2FA and type my long, unique password.

I know they're very popular, but there's so much long-term unintended baggage with using these singe signon systems...even assuming Apple's doesn't have the nefarious parts most others have.

Re: How Popular Is “Sign in with Apple”?

#89
post #72

Earlier quoted context omitted.

Apple continues to not give any care whatsoever to anything outside their walled garden. For the longest time you couldn't even preview songs on iTunes store without having iTunes. Want to watch their biggest WWDC live? Had to use Safari until last year. Obviously iMessage and FaceTime are complete no-gos outside their walled garden too. This is how they keep people in. They have to close down their walls as tightly…

I use a mix of Apple and non-Apple devices. It's a shame that I can't, for example, use Safari on Windows or Android.

There used to be a Safari for Windows. No one used it so Apple dropped support.

Re: How Popular Is “Sign in with Apple”?

#90
post #78
post #41

I tried to do a Sign in with Apple integration on Android (wanted the app to have the same options across platforms). Testing on Android was next to impossible. To test I needed an Apple ID with 2FA. But SMS 2FA was not good enough, you need the hardware-based 2FA. To get that you need a recent macOS or iOS device. As an Android developer I have no reason to own either of those. Eventually I just had a friend who own…

> As an Android developer I have no reason to own either of those. Of course you do: Please implement this iOS application/feature in Android . Not being able to run an application from Xcode onto an iOS device severely hampers your career. I have to deal with so many Android developers and their output I absolutely cannot afford the luxury to not run Android apps from Android Studio. I don't think Sign In With Apple…

I have no idea what you're trying to say. Is the comment on career an insult or genuine?
Post reply on HN