search

dedoussis / icloud-hide-my-email-browser-extension

Enjoy iCloud's Hide My Email service in your favourite browser
https://chrome.google.com/webstore/detail/icloud-hide-my-email/omiaekblhgfopjkjnenhahfgcgnbohlk
MIT License
319 stars 15 forks source link

Support for Advanced Data Protection Hardware keys #26

Open schancksb opened 1 year ago

schancksb commented 1 year ago

Hey, I was wondering, if there is currently support to authenticate with hardware keys on the advanced data protection program of Apple. Maybe, there is a workaround? Sadly, I don't know typescript or JavaScript to implement this feature myself. Best regards.

dedoussis commented 1 week ago

Hello! This has been supported since Nov 2023 although I have not explicitly tested it with my own icloud account. In general, the extension will work as long as you're able to log-in to icloud.com.

When turning on Advanced Data Protection, web access to icloud.com gets disabled. However, you can re-enable it by following the steps of this guide (see the Web access and Advanced Data Protection for iCloud section).

Once you log-in to icloud.com on your browser (via a hardware key), you'll be able to make use of the extension. However, I expect icloud.com auth cookies to have a much shorter TTL meaning that you'll have to be signing into icloud.com more frequently, which adds more friction to using the extension.

dedoussis commented 1 week ago

@schancksb it would be great if you could try using the extension on an icloud account that has ADP enabled to build some understanding what the UX looks like.