ios - NSExceptionAllowsInsecureHTTPLoads not working for IP addresses

Question

excluding ATS on iOS 9 doesn't work for me.

I have a test server which has no domain name (IP address only) and no SSL certificate (so it is HTTP and not HTTPS)

Tried:

<key>52.24.145.252</key>
<dict>
    <key>NSExceptionAllowsInsecureHTTPLoads</key>
    <true/>
    <key>NSIncludesSubdomains</key>
    <true/>
</dict>

But I'm still getting the error:

App Transport Security has blocked a cleartext HTTP (http://) resource load since it is insecure. Temporary exceptions can be configured via your app's Info.plist file.

What am I doing wrong?

Answer 1

You need to add NSAppTransportSecurity dictionary to your info.plist. Then add NSAllowsArbitraryLoads key to that dictionary and set the boolean value to YES.

Update

From 2017 January, if you are using the above mentioned method for opting-out from ATS you need to provide a justification to Apple while submitting your app to AppStore.

App Transport Security REQUIRED January 2017