About “App Transport Security” (ATS)

9 Comments
  • Toxa17
    Posted at 00:59h, 18 September

    “NSAllowsArbitraryLoads = true” not works on iphone6

    • Nathan
      Posted at 20:13h, 25 September

      I had the same problem, but when I moved NSAppTransportSecurity to the top of my plist it worked.

      • Martin
        Posted at 07:17h, 03 October

        Thank you for this comment. Really saved my life…..

  • Simon Fearby
    Posted at 18:42h, 19 September

    For those looking to setup a A+ rated (SSL Labs: https://www.ssllabs.com/ssltest/) certificate can can check out my guide here http://fearby.com/article/adding-a-commercial-ssl-certificate-to-a-digital-ocean-vm/

    I am using a digital ocean domain to host my Corona apps API http://fearby.com/article/the-quickest-way-to-setup-a-scalable-development-ide-and-web-server

    If you want $10 free credit creating a new Ubuntu Digital Ocean (two months free) please use this link: https://www.digitalocean.com/?refcode=99a5082b6de5

  • Nathan
    Posted at 20:45h, 25 September

    I have an exception domain that’s https, but failing one of the other criteria. I found this apple doc that shows the other possible exceptions…

    https://developer.apple.com/library/prerelease/ios/technotes/App-Transport-Security-Technote/index.html#//apple_ref/doc/uid/TP40016240

    Looks like the others are:
    NSThirdPartyExceptionRequiresForwardSecrecy = false,
    NSThirdPartyExceptionMinimumTLSVersion = “TLSv1.0”

    I ended up having to add the NSThirdPartyExceptionRequiresForwardSecrecy exception for mine to work.

  • Umut Demirel
    Posted at 02:39h, 09 October

    Thank you for this information. My app opens youtube videos and with ios 9 ATS, my app started not to open those videos. I applied what is written on here but it did not work. What I found is to add “youtube” under LSApplicationQueriesSchemes :
    LSApplicationQueriesSchemes =
    {
    “youtube”
    },
    Therefore, for the links that launch another app, it seems this schemes must be added.
    This may be helpful for someone encountering the same problem.

    • Mike Kelly
      Posted at 18:29h, 08 November

      hi Umut,

      so you use native.newWebView() to open the videos as opposed to the native.newVideo streaming player?

  • Adi
    Posted at 06:33h, 14 December

    What happens with apps that use http on a device that was migrated to os9? will all attempts fail? That means we need to submit updates to all our apps.

  • Rodrigo Palmeira
    Posted at 14:16h, 18 December

    I’ve updated my device to iOS 9.2 and my requests from webservice suddenly stop working. =(

    What happened?