"The email address however, should only be toggled between the user’s real address or the generated proxy address."
No, a user can have multiple "real addresses" in Apple world.
A great writeup of the details of the Sign In With Apple vulnerability by @aaronpk aaronparecki.com/2020/05/31/…
2
That's true, I noticed I have multiple me.com addresses on my account when I was making the screenshots and forgot to update this text to match. Still, the point is the same.
Jun 1, 2020 · 4:38 PM UTC
1