In iOS 9, I can add keys to my info.plist to disable App Transport Security. There are two keys, NSExceptionAllowsInsecureHTTPLoads
and NSThirdPartyExceptionAllowsInsecureHTTPLoads
, which are defined as:
An optional Boolean value that, when set to YES, allows insecure HTTP loads. Use this key to describe your app’s intended network behavior for a domain whose security attributes you have control over.
and
A version of the NSExceptionAllowsInsecureHTTPLoads key to be used to configure connections to a domain whose security attributes you don’t control.
What security attributes do they refer to? Why does it matter what my intentions are?
What are the circumstances under which I'd use one of these rather than the other?
It looks like the two are identical:
http://www.neglectedpotential.com/2015/06/working-with-apples-application-transport-security/
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With