iOS will require Network Connections to use SSL/HTTPS by the end of 2016.

Hi everyone,

just a reminder, or heads-up, for those of you who use the GS networking behaviors and plan on releasing an app after December 2016.

Apple will no longer accept apps that communicate through straight HTTP. Apple's iOS ATS feature will force communication over an HTTPS connection, resulting in failed communication if your server does not accept SSL.

The "Allow App To Talk To Any Domain Insecurely" option in the GS publishing portal will no longer be a workaround.

Also, using simple self-signed certificates for your server will, at best give your users an ugly popup warning, at worst not be accepted at all.

Android and Amazon are likely to follow suit soon after.

My recommendation is to prepare for this,

  • your current apps in development should cater for SSL
  • if possible, prepare updates for your existing live apps early
  • definitely get your server ready to accept SSL. Do this through a trusted validation site.

Of course, APPFormative already accepts secure connections via HTTPS for all its communication.

I hope this was of help and please let me know what you are doing to prepare for this security upgrade by the app stores.

Regards,
Katharina

Comments

Sign In or Register to comment.