iOS apps will only be allowed to connect to HTTPS services

https://techcrunch.com/2016/06/14/apple-will-require-https-connections-for-ios-apps-by-the-end-of-2016/

What is unclear, yet, is if Safari itself will still be able to do http://.

Also, what will happen to third party browsers like Chrome on iOS ? Will it be forced to connect to https:// only ?

If they deny SAFARI the ability to connect to non-HTTPS sites, then Apple would once again be shooting it self in the foot, making SAFARI useless as a web-browser… since (my guess), over 90% of the websites in the world are HTTP:

Actually, it could be a sneaky way to kill all other browsers : Safari would remain able to connect http://, and all third party browsers would be barred. FireFox, Chrome having to be in the App Store would have no other way than to accept the new order, or be rejected.

THAT might gain Apple a whole set of anti-monopoly lawsuits at least here in the US.

Then once again, the small guy will have to endure the diktat, and big guys will benefit from exemption :confused:

Let’s Encrypt is free and easy to use if you run your own web server.
I do not know how it works with shared hosting.

If you use goPanel for Mac, it’s even built in.

I have no issue about having my sites encrypted or modifying my apps. Already all my major sites are https://.

I wonder more about a lot of small guys who will have to comply with this new rule.

If you read the article, it says:

I suspect they’re targeting API use, like google and Facebook logins, database APIs and things like that.

There were two things that this raised (at least in my mind).

#1 If your iOS connects to your server for anything i guess this means it would have to be a secure connection.
#2 If this is rolled out to the iOS store; it will be rolled out to the Mac App Store also.
#3 See question 1, but replace iOS with Mac.

Of course it will. Don’t be silly, Apple have a whole host of special and custom Sandbox entitlements that are not available to regular developers. And you’ll be rejected from the Mac App Store if you try to use them.

Oh my favorite is com.apple.developer.do-as-I-say-not-as-I-do

Marked “not a regression this has been true since day 1” - literally.
There used to be stuff in the original Mac Developer Manuals which were basically programmers notes, photocopied, and sent out in binders, not bound. There were even hand written bits in the margins. And in spots it basically said “Don’t use this. Its for internal use only.”
They weren’t kidding.

Buddy locally still has a set + an original Mac with the signed case.
Dont think he’ll ever let those go for any amount of $.

I miss the early days of Mac. In that time we really had a sense of magic.

Thats one word for it :stuck_out_tongue:

The deadline for ATS has been removed for now. Apple will announce a new deadline at a later date.

https://developer.apple.com/news/?id=12212016b

[quote=303990:@Tim Parnell]Let’s Encrypt is free and easy to use if you run your own web server.
I do not know how it works with shared hosting.

If you use goPanel for Mac, it’s even built in.[/quote]

It works very well!

I just connected with SSH, downloaded and ran their script and a few seconds later the certs were in the folder ready for me to upload on the site. It also sets up a job to run 3 months later to refresh the certs. All you need to is login and upload the fresh certs.