Hacker News Reader

Comment by dmart | Hacker News Reader

It makes perfect sense, in order to prevent someone else from registering your old @icloud.com email address and impersonating you or performing password resets.

View on HN

That does make sense, but I remember him talking about my gmail address. Not even sure I had an icloud email. But I could very well remember that wrong.

The point is that you don't want someone re-registering on iCloud with that gmail address because then they could impersonate you when interacting with Apple.

I still don't get it. You cancel the account, it should be gone like it never happened. Poof. If you make a new account with the same email, it should be a new account with no relation at all to the old account since that one has been deleted and is gone forever and there would be nothing to impersonate here.

Let's say you have the account johndoe@icloud.com. You use that email as your backup email at your bank. You cancel the account. Now someone else opens a new icloud account with johndoe@icloud.com. They can now access your account by "recovering" your password with the backup email.

But the GP is saying they registered their apple id with a non apple email. Why can't your delete the apple id associated with that email, then create another apple id using the same email?

> I still don't get it. You cancel the account, it should be gone like it never happened

As long as that change cascades to every single site that the user could have registered with.

Otherwise, there could be hundreds or thousands of sites waiting to email confidential information to a new person.

this already happens when you move physically to a new residence. except there isn't a system for "change of email address"

Idiots -- like yahoo -- recycle emails.

Also, emails probably persist in some systems as a guid.

You can have an iCloud account with any e-mail, including a gmail address - might have been the case there?

Reply on news.ycombinator.com