give up http for download from a web site ?

[jmburnod]

Hi all,
I remember to have read that we have to give up http and use https for downloads files from a website to documents folder on iOS.
Is there someone who can confirm it ?
Best regards
Jean-Marc

[FourthWorld]

I searched Google for "Apple requiring https" and this was the first link in the list of results:

Apple will require HTTPS connections for iOS apps by the end of 2016
https://techcrunch.com/2016/06/14/apple ... d-of-2016/

[LiveCode_Panos]

Yes, this is a restriction from Apple. If you still want to access a http website from your iOS app, you can disable ATS (App Transport Security) in the Standalone Settings for iOS, but this is NOT recommended
.

[jmburnod]

Thanks both for quick reply.
I will see with my partners what is the simplest way to use https.
Kind regards
Jean-Marc

[LiveCode_Panos]

Note that simply using https does not guarantee that the connection will be marked as "secure" by ATS. See comment 1 in bug http://quality.livecode.com/show_bug.cgi?id=18645 for more details.

Best,
Panos
--

[jmburnod]

Thanks again,
My partners are not enthousiast to change http to https. They sugest I add my store folder in app.
This folder contains 3'500 .png files (160 Mo).
I wonder if this way is reasonable.
Best
Jean-Marc

[FourthWorld]

My partners are not enthousiast to change http to https.

If you don't mind my asking, I'm curious: why?

The world is switching to HTTPS rapidly, and Let's Encrypt is making this automatable and free. What advantages are there with _not_ having a secure connection?

[jmburnod]

Code: Select all

If you don't mind my asking, I'm curious: why?

I dont know but I think we miss knowledge about the process to become able using https.

[sphere]

I don't know if you have your own hosting service, or have it at somewhere else at a provider.
But my provider in the Netherlands is selling certificates to use https, but is also offering the Let's Encrypt certificate for free which i'm using too now.
All i had to do is tun something on in the user settings and and another setting in DirectAdmin.

Then ofcourse if you use a CMS (wordpress, Joomla etc) , in most cases you need to change a setting there to use https

another thing is get your site on PHP7.x.x and use MySQLi or PDO for higher security. Most CMS's are supporting that nowadays.

[jmburnod]

Hi Sphere,
Thank you for your reply
I confirm my answer to Richard. We needed knowledge about this change. My partners now work with our provider to use https in our web site builded with wordpress.
Best regards
Jean-Marc

[jekyllandhyde]

I believe if you read Apple's new requirements carefully they will still allow http connections to a specific IP address. Not domains though.

[jmburnod]

Hi All
We did some tests with an other site using https. First tests work fine.
That was easier than we thought
Thanks again
Jean-Marc