App Transport Security: Fix the Connection
A development API works over HTTP, but the shipped iOS app rejects it. This guide gives you a small, testable way to approach the issue before changing a live system.
A practical workflow
- Serve the API over a valid HTTPS configuration and test certificate chains.
- Use narrow development exceptions only when justified and document their removal.
What to check
Do not disable transport protections across the whole app to hide a server problem. Compare the result with the original problem and record what changed. If a measurement or test does not support the change, revisit the assumption rather than adding more complexity.
Keep the experiment small enough to reverse. Document the starting state, the change and the result so another person can repeat the process. Product menus and versions can change, so check the current documentation for your environment.
Official reference: Read the documentation.