Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

What is the difference between NSExceptionAllowsInsecureHTTPLoads and NSThirdPartyExceptionAllowsInsecureHTTPLoads?

In iOS 9, I can add keys to my info.plist to disable App Transport Security. There are two keys, NSExceptionAllowsInsecureHTTPLoads and NSThirdPartyExceptionAllowsInsecureHTTPLoads, which are defined as:

An optional Boolean value that, when set to YES, allows insecure HTTP loads. Use this key to describe your app’s intended network behavior for a domain whose security attributes you have control over.

and

A version of the NSExceptionAllowsInsecureHTTPLoads key to be used to configure connections to a domain whose security attributes you don’t control.

What security attributes do they refer to? Why does it matter what my intentions are?

What are the circumstances under which I'd use one of these rather than the other?

like image 393
Simon Avatar asked Nov 08 '22 15:11

Simon


1 Answers

It looks like the two are identical:

http://www.neglectedpotential.com/2015/06/working-with-apples-application-transport-security/

like image 102
Amin Avatar answered Nov 15 '22 07:11

Amin