[ 
https://issues.apache.org/jira/browse/CB-9569?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14944192#comment-14944192
 ] 

ASF subversion and git services commented on CB-9569:
-----------------------------------------------------

Commit 0c3614e2fff6f3579a9220611ad439abde9abde1 in cordova-lib's branch 
refs/heads/master from [~shazron]
[ https://git-wip-us.apache.org/repos/asf?p=cordova-lib.git;h=0c3614e ]

CB-9569 - Support <access> and <allow-navigation> tag translation to 
Application Transport Security (ATS) Info.plist directives.

Tests are included as well. <access> and <allow-navigation> tags have two new 
attributes to account for ATS: minimum-tls-version (defaults to 'TLSv1.2') and 
requires-forward-secrecy (defaults to 'true').

If the defaults are set, there will be *no* corresponding entry in ATS, to 
reduce verbosity in the Info.plist.


> Support <access> and <allow-navigation> tag translation to Application 
> Transport Security (ATS) Info.plist directives
> ---------------------------------------------------------------------------------------------------------------------
>
>                 Key: CB-9569
>                 URL: https://issues.apache.org/jira/browse/CB-9569
>             Project: Apache Cordova
>          Issue Type: Bug
>          Components: CLI
>            Reporter: Shazron Abdullah
>            Assignee: Shazron Abdullah
>              Labels: cordova-ios-4.0.x
>
> By default iOS 9 that requires network connections *must* be HTTPs with 
> certain protocols. You would use ATS for exceptions.
> ATS:
> https://developer.apple.com/library/prerelease/ios/technotes/App-Transport-Security-Technote/
> http://www.neglectedpotential.com/2015/06/working-with-apples-application-transport-security/



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org
For additional commands, e-mail: issues-h...@cordova.apache.org

Reply via email to