App Transport Security(ATS)

App Transport Security(ATS)

If you’re developing a new app, you should use HTTPS exclusively. If you have an existing app, you should use HTTPS as much as you can right now, and create a plan for migrating the rest of your app as soon as possible. In addition, your communication through higher-level APIs needs to be encrypted using TLS version 1.2 with forward secrecy. If you try to make a connection that doesn‘t follow this requirement, an error is thrown. If your app needs to make a request to an insecure domain, you have to specify this domain in your app‘s Info.plist file

• 从iOS9开始，所有的http请求应该采用https，通过TLS 1.2协议加密，目的是增强数据安全。如果仍需使用http访问，暂时可以在Info.plist中声明，使用不安全的网络请求。
• 解决方法：在info.plist中添加以下字段：

NSAppTransportSecurity

    NSAllowsArbitraryLoads