Apple’s Relay Domain Becomes a Shared Failure Point
Apple is collapsing two privacy relay systems onto one new domain, and that creates a single place where overzealous allowlists and mail filters can break both sign-ups and forwarding at once. The risk is not account takeover. It is a quiet outage for legitimate Apple-authored addresses when a site or mail platform has not updated its domain rules.
New addresses from Sign in with Apple and Hide My Email will use private.icloud.com later this summer. Apple says existing privaterelay.appleid.com and icloud.com addresses will keep working, and it is telling developers and email providers to update account validation, allowlists, suppression lists, filtering, and routing to accept the new domain.