PDA

View Full Version : How to work with Apples App Transport Security



hmischel@diligentsystems.com
2016-06-28, 13:05
Hi,

We have some in house IOS apps that would like to use the data services I built using rsp pages.

It looks like apple wants xcode developers on El Capitan to only connect via https, not http.

This is not my area of expertise, so I am a little stumped.

A work around we have found is to have them opt out of ATS, but I am not sure if that is the preferred long term solution

http://www.neglectedpotential.com/2015/06/working-with-apples-application-transport-security/

Any thoughts?

Thanks

Herb

HankFay
2016-06-28, 13:23
Hi Herb,

https should be used for all production servers. Right now, the option is to use the IIS plug-in, which runs LCS through IIS. You can then set https up for the site. The Apache plug-in is coming.

enjoy,

Hank

barrymavin
2016-06-28, 19:24
Hi Herb,

My understanding is that apple still currently works with http. They will be switching over to https exclusively at the end of the year.

As Hank says if you use the IIS plugin then you can use https.

There are plans to add SSL support to cloud server.

This is now in the roadmap for Cloud Server v2.2.

hmischel@diligentsystems.com
2016-06-29, 10:54
Thanks Hank and Barry!