Application Transport Security deadline for iOS apps

[Ralph DiMola]

Jacqueline Landman Gay Wrote:
> I wonder what happens if your app allows general browsing with, say, a
browser widget?
Good Question...

All of my app's web services use https so this is good. But my app has a
database of 3rd party URLs(3,000+) to various websites via the browser
control. Some sites are https some are not. This DB has been
compiled/updated for the last year. You can add specific exceptions to the
plist (I would have a VERY large plist) or set NSAllowsArbitraryLoads to
true. Setting NSAllowsArbitraryLoads to true will allow all of these URLs to
work, but Apple was very clear in that they intend to reject apps who use
this flag without a specific reason. One reason to use
NSAllowsArbitraryLoads I can think of would be allow access to non secure
3rd party web sites. And in this case, Apple still expects you to include
exceptions that enforce the ATS for these URLs. This would of course make my
plist HUGE. I have a business model that could crumble under this rule.

Ralph DiMola
IT Director
Evergreen Information Services
rdimola at evergreeninfo.net


-----Original Message-----
From: use-livecode [mailto:use-livecode-bounces at lists.runrev.com] On Behalf
Of J. Landman Gay
Sent: Monday, July 11, 2016 4:56 PM
To: How to use LiveCode
Subject: Re: Application Transport Security deadline for iOS apps

On 7/11/2016 9:31 AM, Mark Waddingham wrote:
> Of course, it should be pointed out here that ATS relates to app 
> developers writing apps *not* general internet usage through browsers 
> on iOS and Mac devices. i.e. Apple are saying - "if you have control 
> over your servers and such then we expect you to follow best security 
> practice if you want to benefit from our store ecosystem".

I wonder what happens if your app allows general browsing with, say, a
browser widget?

-- 
Jacqueline Landman Gay         |     jacque at hyperactivesw.com
HyperActive Software           |     http://www.hyperactivesw.com

_______________________________________________
use-livecode mailing list
use-livecode at lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode