App Transport Security Settings


One of the changes in iOS 9+ is a default setting that requires apps to make network connections only over HTTPS; this is known as App Transport Security (ATS) .

Starting January 2017, Apple is requiring all applications submitted to the app store to have ATS enabled . To comply with these requirements and ensure your ads continue to serve correctly, one of the following options must be used to ensure the MoPub SDK continues to work as expected.

OPTION 1. Upgrade to MoPub SDK v4.11.1+ and do the following:

Set up the following keys in your app’s info.plist:

  • NSAllowsArbitraryLoads: YES
  • NSAllowsArbitraryLoadsForMedia: YES
  • NSAllowsArbitraryLoadsInWebContent: YES

IMPACT: This will enable ATS on iOS 10 for the app, while allowing non-secure ads to load in the webview and provide continued ad serving for publishers per Apple’s documentation . This setting will disable ATS on iOS 9 since the selective ATS settings are not available in that OS.

ADDITIONAL ACTION REQUIRED: Publishers will have to provide a justification for using these keys. Per Apple documentation, loading web content from a variety of sources (for ads) is an acceptable justification. See “App Store Review for ATS” section here .

IMPORTANT NOTE: With these settings, publishers will be able to run direct ads that load insecure content for all formats except native. Native ads will have to be loaded from secure locations. Direct ads that were uploaded to the MoPub system automatically support a secure connection.

FYI: Network SDK mediation for Publishers who upgrade to 4.11.1+

If any Network SDK requires NSAllowsArbitraryLoads to YES ONLY, then the MoPub SDK settings must also be set to NSAllowsArbitraryLoads to YES ONLY .

Please check with Network SDK requirements to ensure that there will be no adverse affects when turning ATS on for the app on iOS 10, outside of the ForMedia and InWebContent ATS keys.

OPTION 2. Do not upgrade to MoPub SDK 4.11.1+ right now

Set up the following key in your app’s info.plist only:

  • NSAllowsArbitraryLoads: YES

IMPACT: This will disable ATS for all traffic in the application for all iOS versions.

ADDITIONAL ACTION REQUIRED: Publishers will have to provide a justification for using these keys. Per Apple documentation, loading web content from a variety of sources (for ads) is an accepted justification. See “App Store Review for ATS” section here .

IMPORTANT NOTE: The instructions above apply only to MoPub . Publishers should check with their network partner for their specific instructions for Network SDKs, but should never set ATS settings that are stricter than described above.

If you have any questions, please contact your account team or email support@mopub.com for more information.

Updated: March 2017