1 Reply
      Latest reply: Dec 15, 2016 1:47 AM by eskimo RSS
      Leosion Level 1 Level 1 (0 points)

        My game Need download some in-game assets from AWS Cloudfront, but as I know the AWS Cloudfront haven't support HTTPS, what I should do when I submit my game in the next year?

        • Re: How do I do with my game For HTTPS REQUIRED January 2017?
          eskimo Apple Staff Apple Staff (6,480 points)

          You have three options here:

          • Move to a different asset download mechanism (like Apple’s own on-demand resources)

          • Change your server to support HTTPS

          • Change your app to declare an ATS exception for the specific domain from which you download your assets, and then deal with the App Review fallout

          Of these, I know which one I’d rather do (-:

          IMPORTANT Keep in mind that, if you download assets via HTTP, someone can trivially spoof the server to substitute their own assets.  That might expose your app to security vulnerabilities.  So, if you skip the security given to you by HTTPS, you have to add your own security, checking the validity of the assets via some other means.

          Share and Enjoy

          Quinn “The Eskimo!”
          Apple Developer Relations, Developer Technical Support, Core OS/Hardware
          let myEmail = "eskimo" + "1" + "@apple.com"