A Boolean value indicating whether App Transport Security restrictions are disabled for all network connections.
- iOS 9.0+
- macOS 10.11+
- Allow Arbitrary Loads
Set this key’s value to
YES to disable App Transport Security (ATS) restrictions for all domains not specified in the NSExceptionDomains dictionary. Domains you specify in that dictionary aren’t affected by this key’s value.
Disabling ATS means that unsecured HTTP connections are allowed. HTTPS connections are also allowed, and are still subject to default server trust evaluation, as described in Ensure the Network Server Meets Minimum Requirements. However, extended security checks—like requiring a minimum Transport Layer Security (TLS) protocol version—are disabled. Without ATS, you’re also free to loosen the default server trust requirements, as described in Performing Manual Server Trust Authentication.
In iOS 10 and later and macOS 10.12 and later, the value of the
NSAllows key is ignored—and the default value of
NO used instead—if any of the following keys are present in your app’s Information Property List file:
For more information about how the OS version affects ATS behavior, see the NSAppTransportSecurity key’s Versioning section.