The zero-day bug in Sign In with Apple actually had nothing to do with the OAuth or OpenID Connect part of the Sign In with Apple exchange, and very little to do even with JWTs. Let's take a closer look to see what actually happened.
My 2017 12" MacBook is starting to show its age, but I hate that there is nothing to replace it right now. There's no reason to get a MacBook Air since it's the same form factor as the 13" Pro. But it seems unlikely they're going to release a small computer again at this point.
Yes, and one of my goals is to, while adhering to Apple’s business practices and style, get involved where I can. I’d really appreciate it if you could publicly or privately let me know about venues you think would be relevant to my team.
Yes, come to the next Internet Identity Workshop, or even the next OAuth group's meeting! (November in Singapore) We would all gladly welcome any engagement by Apple in this space!