arkavo-org / arkavo-org/app

Configure App Transport Security (ATS) Explicitly

Open
#129 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Swift
Stars
0
Forks
0
Avg merge
1h 41m
Merged PRs (30d)
1

Description

## Priority: Low

Explicitly configure ATS in Info.plist to enforce HTTPS for all connections.

## Current State
Using default ATS settings

## Implementation

Add to Info.plist:
```xml
NSAppTransportSecurity

NSAllowsArbitraryLoads

NSAllowsLocalNetworking

```

## Benefits
- Enforces HTTPS for all connections
- Prevents accidental HTTP usage
- Explicit security policy
- Better compliance posture

## Files to Modify
- Arkavo/Arkavo/Info.plist

## Testing
- Verify HTTPS enforcement
- Confirm InnerCircle P2P still works with local networking exception

## References
Part of security audit findings

Contributor guide

No contributing guide indexed for this repository

Research direction

Open Arkavo/Arkavo/Info.plist and inspect the current App Transport Security settings. Add the specified HTTPS enforcement and local networking exception, then verify HTTPS enforcement and confirm that InnerCircle P2P still works with local networking enabled.

Written by the indexing model from the issue text.

Assessment

Tech stack
ios, swift
Domain
mobile, security
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.