Using App Transport Security (ATS) in iOS

Hi,

I’m a relatively new developer, and I’ve spent the last few weeks going through the Corona Developer Guides. I just recently came across App Transport Security (ATS) that is now required in apps on the App Store. I know what ATS is used for, but I am not certain how I would implement ATS in my apps.

Is there a block of code that can be inserted to cover the ATS requirement? And, would that code all be located in main.lua? I’m not sure if this makes a difference, but I plan to have ads in my apps as well as possibly social media and match-ups between users.

Thanks!

You can read more about how to manage ATS with Corona in this guide:

https://docs.coronalabs.com/guide/hardware/appleATS/index.html

BTW: 

ATS is not required by Apple just yet. They did have plans on enforcing it from January 2017, however those plans have changed and Apple have yet to announce a new deadline.

Thank you for the quick response.

I have some follow up questions for you:

Is it fine with Apple, then, if I don’t include/mention ATS features at all in my code even when the new mandatory date comes? If I do that, I would think the default ATS features would remain, and I would pass the mandatory requirements.

Also, if I leave default ATS settings as they are, would users of my app will still be able to connect over wifi, their internet, etc., as long as that connection is deemed “safe” by ATS? This would most likely affect my app’s ability to display ads. I’m not sure how protective ATS is to the point where I have to configure ATS settings.

Sorry for the picky questions. I read through the Developer Guide on this a few times already as well as Apple’s Documentation, and I’m still confused with some aspects of ATS.

By default ATS is enabled on iOS 9 and 10.

If you plan on using advertising in your apps, configuring ATS will depend on the ad network you plan on using.

Some ad networks require ATS to be disabled, some don’t. You’ll find information about an ad plugin’s ATS requirements in their respective documentation.

You can read more about how to manage ATS with Corona in this guide:

https://docs.coronalabs.com/guide/hardware/appleATS/index.html

BTW: 

ATS is not required by Apple just yet. They did have plans on enforcing it from January 2017, however those plans have changed and Apple have yet to announce a new deadline.

Thank you for the quick response.

I have some follow up questions for you:

Is it fine with Apple, then, if I don’t include/mention ATS features at all in my code even when the new mandatory date comes? If I do that, I would think the default ATS features would remain, and I would pass the mandatory requirements.

Also, if I leave default ATS settings as they are, would users of my app will still be able to connect over wifi, their internet, etc., as long as that connection is deemed “safe” by ATS? This would most likely affect my app’s ability to display ads. I’m not sure how protective ATS is to the point where I have to configure ATS settings.

Sorry for the picky questions. I read through the Developer Guide on this a few times already as well as Apple’s Documentation, and I’m still confused with some aspects of ATS.

By default ATS is enabled on iOS 9 and 10.

If you plan on using advertising in your apps, configuring ATS will depend on the ad network you plan on using.

Some ad networks require ATS to be disabled, some don’t. You’ll find information about an ad plugin’s ATS requirements in their respective documentation.