Open Letter from the OpenID Foundation to Apple Regarding Sign in with Apple (openid.net)

Article summary

The OpenID Foundation has written an open letter to Apple regarding their Sign in with Apple feature, which is based on the OpenID Connect standard but has some differences. The foundation is asking Apple to address these gaps and make their implementation fully compatible with OpenID Connect. This would improve interoperability and security for users. The foundation also invites Apple to join the OpenID Foundation and use their self-certification test suite.

Main themes

• OpenID Connect
• Sign in with Apple
• Interoperability
• Security
• Standardization
• Membership

What commenters say

• Apple's implementation of Sign in with Apple has security implications due to its differences from the OpenID Connect standard.
• The cost of membership in the OpenID Foundation is negligible for a company like Apple.
• The OpenID Foundation's request for Apple to join and pay membership fees may be seen as an attempt to strong-arm the company into compliance.
• Using standard OpenID clients for Sign in with Apple authentication is not currently possible due to Apple's custom implementation.
• The OpenID Foundation's certification suite is open-source and free to use, but there is a fee for the certified logo and listing.
• Apple's decision not to fully implement OpenID Connect may be seen as a refusal to contribute back to the community that developed the standard.
• The OpenID Foundation's public letter may be seen as a form of public shaming, rather than a constructive approach to resolving the issue.