<story><title>Face ID and Touch ID for the Web</title><url>https://webkit.org/blog/11312/meet-face-id-and-touch-id-for-the-web/</url></story><parent_chain><item><author>yegle</author><text>&amp;quot;Sign in with Apple&amp;quot; requires a developer account with Apple.&lt;p&gt;Having saw Epic&amp;#x27;s developer account terminated by Apple, I would definitely stay away from any &amp;quot;Sign in with Apple&amp;quot;.&lt;p&gt;(FWIW, the only 2fa with &amp;quot;Sign in with Apple&amp;quot;, if you don&amp;#x27;t own any Apple hardware, is SMS.)</text></item><item><author>blintz</author><text>So happy Apple decided to go with an open standard here rather than something proprietary. This is good news for the FIDO2 ecosystem and I hope this leads to far greater support for FIDO2 authenticators of all types.&lt;p&gt;There is another world in which Apple just pushed &amp;#x27;Sign in with Apple&amp;#x27; and created yet another federated identity provider rather than true, &amp;#x27;secure element&amp;#x27;-based FIDO2 authentication.</text></item></parent_chain><comment><author>snowwrestler</author><text>It&amp;#x27;s pretty clear Epic set out to intentionally get their Apple developer account terminated so they would have standing to sue, so I would not draw too much inference from that.&lt;p&gt;That said, it&amp;#x27;s generally true that any dependence on a platform is a form of risk. There are documented examples of Google kicking people out of their ecosystem unexpectedly too.&lt;p&gt;Federated sign-in schemes may be a good idea if they help your users create accounts and authenticate more easily, but it certainly seems smart to offer more than one, including your own email-based option.</text></comment>
<story><title>Face ID and Touch ID for the Web</title><url>https://webkit.org/blog/11312/meet-face-id-and-touch-id-for-the-web/</url></story><parent_chain><item><author>yegle</author><text>&amp;quot;Sign in with Apple&amp;quot; requires a developer account with Apple.&lt;p&gt;Having saw Epic&amp;#x27;s developer account terminated by Apple, I would definitely stay away from any &amp;quot;Sign in with Apple&amp;quot;.&lt;p&gt;(FWIW, the only 2fa with &amp;quot;Sign in with Apple&amp;quot;, if you don&amp;#x27;t own any Apple hardware, is SMS.)</text></item><item><author>blintz</author><text>So happy Apple decided to go with an open standard here rather than something proprietary. This is good news for the FIDO2 ecosystem and I hope this leads to far greater support for FIDO2 authenticators of all types.&lt;p&gt;There is another world in which Apple just pushed &amp;#x27;Sign in with Apple&amp;#x27; and created yet another federated identity provider rather than true, &amp;#x27;secure element&amp;#x27;-based FIDO2 authentication.</text></item></parent_chain><comment><author>krtkush</author><text>&amp;gt; I would definitely stay away from any &amp;quot;Sign in with Apple&amp;quot;.&lt;p&gt;I would stay away from any &amp;quot;Sign in with..&amp;quot; service as a user and as a product owner. You&amp;#x27;re affectively giving away a major control of your users to a third party.</text></comment>