<!--
{
  "availability" : [
    "iOS: 9.0.0 -",
    "iPadOS: 9.0.0 -",
    "macOS: 10.11.0 -",
    "visionOS: 1.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "BundleResources",
  "identifier" : "/documentation/BundleResources/Information-Property-List/NSExceptionAllowsInsecureHTTPLoads",
  "metadataVersion" : "0.1.0",
  "role" : "Property List Key",
  "symbol" : {
    "kind" : "Property List Key",
    "modules" : [
      "Bundle Resources"
    ],
    "preciseIdentifier" : "plist:Information_Property_List.NSExceptionAllowsInsecureHTTPLoads"
  },
  "title" : "NSExceptionAllowsInsecureHTTPLoads"
}
-->

# NSExceptionAllowsInsecureHTTPLoads

A Boolean value indicating whether to allow insecure HTTP loads.

## Discussion

Set the value for this key to `YES` to allow insecure HTTP loads for the given domain, or to be able to loosen the server trust evaluation requirements for HTTPS connections to the domain, as described in <doc://com.apple.documentation/documentation/Foundation/performing-manual-server-trust-authentication>.

Using this key doesn’t by itself change default server trust evaluation requirements for HTTPS connections, described in `Ensure the Network Server Meets Minimum Requirements`. Using only this key also doesn’t change the TLS or forward secrecy requirements imposed by ATS. As a result, you might need to combine this key with the [`NSExceptionMinimumTLSVersion`](/documentation/BundleResources/Information-Property-List/NSExceptionMinimumTLSVersion) or [`NSExceptionRequiresForwardSecrecy`](/documentation/BundleResources/Information-Property-List/NSExceptionRequiresForwardSecrecy) key in certain cases.

This key is optional. The default value is `NO`.

> Important:
> You must supply a justification during App Store review if you set the key’s value to YES, as described in `Provide Justification for Exceptions`.

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)