111–120 of 120 posts
Earlier quoted context omitted.
Thank you! It is definitely a misinterpretation. Apple makes https mandatory now and there is no way every developer would have to go through this process.
I think "only" apps that allow communication are affected. Websites that only pull generic data are safe.
Last year I learned that to publish an app in the App Store or Mac App Store, if it uses encryption of any kind and yes, HTTPS and SSL count, you need an Encryption Registration (ERN) from the US Bureau of Industry (BIS). Some people claim it's fine to lie to Apple, claim no use of encryption and get in the app store. I'd rather do it the right way. When I started the process of getting the ERN, I quickly notice it w…
I am confident that it is not true and the apple dev support rep you talked to have no idea what they were talking about.
Earlier quoted context omitted.
Nope, this is for everyone. Apple is exporting your app from US, so they need this paperwork from you. The only other options are: * send Apple a paper promising that you will only distribute your app in US and Canada stores, discarding all other markets. * make your encryption use insecure 64-bit keys. * make your complete app open source. * (some other options, such as when using encryption only for authentication)…
Only US citizens are likely vulnerable to the attempts to fine though.
Last year I learned that to publish an app in the App Store or Mac App Store, if it uses encryption of any kind and yes, HTTPS and SSL count, you need an Encryption Registration (ERN) from the US Bureau of Industry (BIS). Some people claim it's fine to lie to Apple, claim no use of encryption and get in the app store. I'd rather do it the right way. When I started the process of getting the ERN, I quickly notice it w…
Where is your blog?
At the same time Apple encourages the use of HTTPS with App Transport Security (ATS). Starting in iOS 9.0 and OS X v10.11, a new security feature called App Transport Security (ATS) is available to apps and is enabled by default. It improves the privacy and data integrity of connections between an app and web services by enforcing additional security requirements for HTTP-based networking requests. Specifically, with…
How is this different from Android apps distributed through Google Play? Legally I mean, why don't Google Play do the same thing?
Apple is required the ERN to cover their asses, I believe. The ERN is required by the US government, so, if you don't have it, you are breaking the law whether you are using Google Play or Apple. So, you should get it for Google Play too.
How is this different from Android apps distributed through Google Play? Legally I mean, why don't Google Play do the same thing?
Apple requires the ERN because Apple is very US centric. For Google, there might be cases in which the ERN is not required because the app never leaves the US (because for other countries it comes from other countries). Apple is required the ERN to cover their asses, I believe. The ERN is required by the US government, so, if you don't have it, you are breaking the law whether you are using Google Play or Apple. So,…
ignoring anything else, that process seemed pretty smooth to me, esp for government. Sure you hit a few snags, but the main one (a lost email) could've happened signing up anywhere.
The second problem was a lot of jargon that was in my opinion unnecessary and was internal US government leaking to the end users and you had to learn it to understand the documentation about what to do. Figuring out what SNAP-R stood for took me way to long and it's nothing more than a website registration (from my point of view).
Not specific to Apple. Same thing has to be done for any other app store, like Google's. Some mentioned that there is an exception if you use OS libraries for encryption. I think that's not the case, but I think using some third party SDKs like Game Center (for which I guess the providers did the paper work) is excepted.
Earlier quoted context omitted.
what if I am working in un-friendly country trying to import it to friendly countries via the App Store?
For exporting to friendly countries via App Store, you'll need an ERN. I'm not sure if the App Store will accept submission from unfriendly countries. It depends which one I guess.