Apple's Plan to Shift Hide My Email Domain Could Weaken Privacy Protections

Apple is reportedly planning a significant change to its Hide My Email privacy feature that could make it less effective in protecting users' anonymity when signing up for online services. This shift, according to internal notes shared with developers, involves moving the email addresses generated by the @icloud.com domain to a new @private.icloud.com domain.

Originally introduced as an iCloud+ feature, Hide My Email allows paying customers to create anonymous email addresses under the @icloud.com domain. These emails then forward messages directly to users' real email addresses without revealing their personal information. The key aspect of this feature was its ability to blend in with regular Apple users, who also use the @icloud.com domain.

However, according to recent internal communications from Apple, changes are coming. Starting soon, these anonymous email addresses will be moved to a new subdomain: @private.icloud.com. This change is expected to make it easier for apps and websites to identify which sign-ups are using the Hide My Email feature, potentially leading to increased filtering or blocking of users who rely on this service.

Apple has assured that existing email addresses will continue to function without interruption. However, app and email providers must now update their filtering systems to accommodate the new domain structure. The company is also urging developers to make necessary adjustments to maintain smooth communication for users who depend on Hide My Email.

User reaction to this change has been mixed, with many expressing concerns that it could undermine the privacy benefits of the feature. Some Apple users on Reddit have criticized the move, arguing that it might render their efforts to protect personal information more vulnerable.

Earlier this year, TechCrunch reported an incident where Apple provided real account information to the FBI in response to a subpoena regarding a user who allegedly used Hide My Email for threatening purposes. This event has raised questions about the balance between privacy and legal obligations that tech companies face today.