Configure App Transport Security (ATS) Explicitly
- Dominant language
- Swift
- Stars
- 0
- Forks
- 0
- Avg merge
- 1h 41m
- Merged PRs (30d)
- 1
Description
## Priority: Low
Explicitly configure ATS in Info.plist to enforce HTTPS for all connections.
## Current State
Using default ATS settings
## Implementation
Add to Info.plist:
```xml
NSAppTransportSecurity
NSAllowsArbitraryLoads
NSAllowsLocalNetworking
```
## Benefits
- Enforces HTTPS for all connections
- Prevents accidental HTTP usage
- Explicit security policy
- Better compliance posture
## Files to Modify
- Arkavo/Arkavo/Info.plist
## Testing
- Verify HTTPS enforcement
- Confirm InnerCircle P2P still works with local networking exception
## References
Part of security audit findings
Contributor guide
No contributing guide indexed for this repository
Research direction
Open Arkavo/Arkavo/Info.plist and inspect the current App Transport Security settings. Add the specified HTTPS enforcement and local networking exception, then verify HTTPS enforcement and confirm that InnerCircle P2P still works with local networking enabled.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- ios, swift
- Domain
- mobile, security
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 55/100