OpenID Foundation Thinks ‘Sign In With Apple’ Could Have Security Risks

These days when you sign into online services, you have the option of choosing to sign in with platforms like Facebook, Google, and so on. However, at WWDC 2019, Apple announced that they will be introducing a new feature called “Sign in with Apple”. This is similar to options provided by Facebook and Google, but the main difference being that Apple has boasted that its service will offer up better privacy.

However, not everyone feels the same because in an open letter addressed to Apple’s software chief, Craig Federighi, the OpenID Foundation claims that it could actually pose both privacy and security risks.

According to the letter, it reads, “The current set of differences between OpenID Connect and Sign In with Apple reduces the places where users can use Sign In with Apple and exposes them to greater security and privacy risks. It also places an unnecessary burden on developers of both OpenID Connect and Sign In with Apple. By closing the current gaps, Apple would be interoperable with widely-available OpenID Connect Relying Party software.”

The foundation has since provided Apple with some suggestions on how they could address this problem, and also to join the OpenID Foundation. In the meantime, Apple is expected to introduce this new feature later this year. They are also making it so that apps that offer sign-ins with competing services will also need to offer Apple’s own solution.

Tyler Lee
Categories: Apple, Cellphones
Tags: iOS, Privacy, Security