iCloud’s ‘Hide My Email’ Feature Becomes Easier to Block ⇥ developer.apple.com

Apple on its Developer site (via Arseniy Shestakov):

Later this summer, Apple will unify the email domains used by Sign in with Apple and iCloud+ Hide My Email under a single, shared domain: private.icloud.com.

New addresses generated for both features will be issued on the new domain. […]

Previously, Hide My Email addresses were generated on icloud.com, the same domain as any other iCloud email address. This made it basically impossible for web admins to block registration using Hide My Email. After this change, they can just block signups that use private.icloud.com. Some similar third-party services have a list of alternative domains for creating an email account, and I hope it is possible to use icloud.com in addition to the unified subdomain — but if it were, Apple probably would have said that.