disable ATS

Question

Created Jun ’24

Replies 2

Boosts 0

Participants 3

My App needs to send and receive messages to the server, but my server does not have SSL, so I can only disable ATS in the development stage. But if I want to put the app on the shelf, then I still disable ATS when I put it on the shelf, and the server still does not have SSL. Will it be packaged? Is pp warned and terminated by Xcode? Will it be rejected by the Apple audit department? Can it be put on the App Store normally and provided to all users?

Note: My server is completely safe without any security risks. I didn't apply for SSL just because I didn't have enough funds.

Answered by endecotp in 793485022

I didn't apply for SSL just because I didn't have enough funds.

Let’s Encrypt is free.

https://letsencrypt.org

Boost

Answer 1

endecotp OP

Jun ’24

Accepted Answer

Recommended

I didn't apply for SSL just because I didn't have enough funds.

Let’s Encrypt is free.

https://letsencrypt.org

1

Answer 2

DTS Engineer OP

Apple

Jul ’24

To answer your direct question… well… I think something might have been lost in translation but it sounds like you’re concerned about the App Review impact of disabling ATS. If so, we can’t really help you here because App Review has the final say as to what is or isn’t allowed on the App Store. However, you can find some info about this in the our documentation.

Still, my advice is that you do what endecotp suggested and enable HTTPS on your server. It’s the best option for your users, it makes your app simpler and more secure, it avoids any potential problems with App Review, and with Let’s Encrypt it’s free.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

1