• NotMyOldRedditName@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      15 hours ago

      How do you suppose APNS knows which device to deliver the notification to?

      Something that… links it to the device? Like, a unique ID that Apple can identify?

      It sounds like he thinks HE has to store this information, which is simply incorrect. It will obviously be stored by Google in Firebase, and by Apple wherever that gets stored, but HE does not have to store it.

      I write apps for a living. I have users subscribe and unsubscribe to channels, and at no point is there a user account with password involved in either iOS or Android. If you want the memory of which channels they have subscribed to to persist across uninstall/reinstalls or different devices, then yes, but for an app like this you don’t need to persist those settings.

      At any point the government could subpoena who’s received pushes (or at least, who’s registered to) from both Google and Apple.

      • SMillerNL@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        15 hours ago

        I’m not the developer, but I do also write app backends for a living so I know there is some nuance that you’re skipping over in your response. But if you have a way to do this completely anonymous on android I’d suggest offering help to the developer who made this.

        Something that… links it to the device? Like, a unique ID that Apple can identify?

        APNS tokens are linked to the app install and renew on a certain timeline. Already making them not exactly the same as a device identifier.

        • NotMyOldRedditName@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          15 hours ago

          Just figured I’d add Apples own documentation as well

          https://developer.apple.com/documentation/usernotifications/registering-your-app-with-apns

          Apple Push Notification service (APNs) must know the address of a user’s device before it can send notifications to that device. This address takes the form of a device token unique to both the device and your app. At launch time, your app communicates with APNs and receives its device token, which you then forward to your provider server. Your server includes that token with any notifications it sends.

        • NotMyOldRedditName@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          15 hours ago

          No, you’re right, GOOGLE will take the device identifier, but him talking about how he would need to store it, and especially for channels where he talks about user names and passwords really makes me think that he thinks he personally has to do it, with his own backend storing it. (edit: The point is, that he doesn’t HAVE to do it this way. You can, and it gives you more control, but you can let Google do it all. It’s never anonymous with anyone though.)

          Apple knows which devices have the app installed. They would be able to link that back to the device if it was demanded, even if it is a bit more obscured.