Re: App Transport Security has blocked a cleartext HTTP for a local IP

2015-10-16 Thread Charles Srstka
> On Oct 16, 2015, at 2:32 AM, James White wrote: > > It's not necessarily a vulnerability. The purpose of ATS is to get people > thinking about implementing SSL. Potentially Apple could make this mandatory > in the future but you'll have plenty of notice. If they made it mandatory, they would

Re: App Transport Security has blocked a cleartext HTTP for a local IP

2015-10-16 Thread James White
It's not necessarily a vulnerability. The purpose of ATS is to get people thinking about implementing SSL. Potentially Apple could make this mandatory in the future but you'll have plenty of notice. Sent from my iThing > On 16 Oct 2015, at 08:14, Devarshi Kulshreshtha > wrote: > > What happe

Re: App Transport Security has blocked a cleartext HTTP for a local IP

2015-10-16 Thread Devarshi Kulshreshtha
On Fri, Oct 16, 2015 at 1:59 AM, Jens Alfke wrote: > What’s the exact URL that failed to load? > > —Jens http://10.32.27.12/api/Students -- Thanks, Devarshi ___ Cocoa-dev mailing list (Cocoa-dev@lists.apple.com) Please do not post admin requests

Re: App Transport Security has blocked a cleartext HTTP for a local IP

2015-10-16 Thread Devarshi Kulshreshtha
> I read on some blogposts that ios9 GM did not support IP addresses for > ATS. Do not know if this has changed. > > I am testing it on iOS9 simulator :-/ > On Thu, Oct 15, 2015 at 9:06 PM, Devarshi Kulshreshtha < > devarshi.bluec...@gmail.com> wrote: > >> Our webservices are hosted in some local

Re: App Transport Security has blocked a cleartext HTTP for a local IP

2015-10-16 Thread Devarshi Kulshreshtha
What happens if you only use this: > > NSAllowsArbitraryLoads > > > ?? > Then it works as expected.. but that is not the preferred approach .. because we are pointing to local ip just for testing purpose, in future we will be pointing it to a public IP (probably https) and if we miss to update

Re: App Transport Security has blocked a cleartext HTTP for a local IP

2015-10-15 Thread Alex Zavatone
What happens if you only use this: NSAllowsArbitraryLoads ?? On Oct 15, 2015, at 3:56 PM, Marek Hrušovský wrote: > I read on some blogposts that ios9 GM did not support IP addresses for ATS. > Do not know if this has changed. > > On Thu, Oct 15, 2015 at 9:06 PM, Devarshi Kulshreshtha < > deva

Re: App Transport Security has blocked a cleartext HTTP for a local IP

2015-10-15 Thread Jim Adams
They added a check for http vs https. You have to add an entry to the plist to allow that kind of access… > On Oct 15, 2015, at 4:29 PM, Jens Alfke wrote: > > What’s the exact URL that failed to load? > > —Jens > ___ > > Cocoa-dev mailing list (Coco

Re: App Transport Security has blocked a cleartext HTTP for a local IP

2015-10-15 Thread Jens Alfke
What’s the exact URL that failed to load? —Jens ___ Cocoa-dev mailing list (Cocoa-dev@lists.apple.com) Please do not post admin requests or moderator comments to the list. Contact the moderators at cocoa-dev-admins(at)lists.apple.com Help/Unsubscribe/

Re: App Transport Security has blocked a cleartext HTTP for a local IP

2015-10-15 Thread Marek Hrušovský
I read on some blogposts that ios9 GM did not support IP addresses for ATS. Do not know if this has changed. On Thu, Oct 15, 2015 at 9:06 PM, Devarshi Kulshreshtha < devarshi.bluec...@gmail.com> wrote: > Our webservices are hosted in some local IP, to bypass the App Transport > Security I added t