Overview
- Apple told developers in a recent notice that new relay addresses for Sign in With Apple and Hide My Email will be issued on a single private.icloud.com domain.
- The company urged developers and email providers to review and update email validation checks, allowlists, filtering rules, suppression lists, and routing configurations before the rollout.
- Apple says existing relay addresses on the older domains will continue to forward messages so current aliases should keep working.
- Privacy advocates and security reporters warn that using private.icloud.com makes new aliases technically identifiable and could let sites block anonymous sign-ups by rejecting that domain.
- If services do not update their systems, users could face failed sign-ups, missing verification and password-reset emails, and harder account recovery, and the change follows earlier reporting that relay services do not guarantee total anonymity in legal cases.