iOS apps preparedness for iOS 9?

Donnie Hale
Donnie Hale Member Posts: 2,036
edited November 21 in English Forum

In iOS 9, Apple is making a fundamental change in its networking libraries:

According to this iOS 9.0 technote, by default, applications (“apps”) that use Apple’s underlying communication libraries will now require the following cryptographic characteristics for all new network connections:

  • The server must support at least TLS version 1.2.
  • Connection ciphers are limited to those that provide forward secrecy.
  • Certificates with weak signatures will result in a hard failure and no connection. Certificates must be signed using a SHA256 or better signature hash algorithm, with either a 2048-bit or greater RSA key or a 256-bit or greater Elliptic Curve Cryptography (ECC) key.

Because the new requirements are on by default in the App Transport Security (ATS) library, they will improve the security of network communication for the vast library of applications in the Apple ecosystem.

Are the Faithlife iOS apps and, perhaps more importantly, the FL server endpoints which those apps hit, able to support this change? In other words, if I update to iOS 9, will my FL apps break because the FL server endpoints don't meet those requirements?

Thanks,

Donnie

Tagged:

Comments

Categories