【HTTPS Everywhere】AppleがWebに接続するiOSアプリは2017年1月からHTTPSの使用が絶対条件と発表

【HTTPS Everywhere】「Blogspot」ドメインの「HTTPS リダイレクト」に関する考察と
設定オン後に検証して修正した事
【HTTPS Everywhere】「Blogspot」ドメインの全てのブログで暗号化接続が
デフォルトで有効となり警告·修正するツールが提供された件
【HTTPS Everywhere】Google Chrome「デベロッパー ツール」に追加された
「Security Panel」がとてつもなく便利

 Apple will require HTTPS connections for iOS apps by the end of 2016

source : 2016.06.14 TechCrunch (ボタンクリックで引用記事が開閉)

During a security presentation at Apple’s Worldwide Developers’ Conference, the company revealed the deadline for all apps in its App Store to switch on an important security feature called App Transport Security — January 1, 2017.

“Today, I’m proud to say that at the end of 2016, App Transport Security is becoming a requirement for App Store apps,” Apple’s head of security engineering and architecture, Ivan Krstic, said during a WWDC presentation. “This is going to provide a great deal of real security for our users and the communications that your apps have over the network.”

App Transport Security, or ATS, is a feature that Apple debuted in iOS 9. When ATS is enabled, it forces an app to connect to web services over an HTTPS connection rather than HTTP, which keeps user data secure while in transit by encrypting it.

The “S” in HTTPS helpfully stands for secure and you’ll often see it appear in your browser when logging into your banking or email accounts. But mobile apps often aren’t as transparent with users about the security of their web connections, and it can be hard to tell whether an app is connecting via HTTP or HTTPS.

Enter ATS, which is enabled by default for iOS 9. However, developers can still switch ATS off and allow their apps to send data over an HTTP connection — until the end of this year, that is. (For technical crowd: ATS requires TLS v 1.2, with exceptions for already encrypted bulk data, like media streaming.)

At the end of 2016, Apple will make ATS mandatory for all developers who hope to submit their apps to the App Store. App developers who have been wondering when the hammer would drop on HTTP can rest a little easier now that they have a clear deadline, and users can relax with the knowledge that secure connections will be forced in all of the apps on their iPhones and iPads.

In requiring developers to use HTTPS, Apple is joining a larger movement to secure data as it travels online. While the secure protocol is common on login pages, many websites still use plain old HTTP for most of their connections. That’s slowly changing as many sites make the arduous transition to HTTPS.

Tools & Laboratory Windows10 Current-Label : Browser