How to block all HTTP urls in iOS Application

Question

I searched and found many links which tells to block HTTP and some specific domain or allow specific domain using Transport Security in Plist file like Transport security has blocked a cleartext HTTP and Application Transport Security. I used following in my plist

<key>NSAppTransportSecurity</key>
<dict>
    <key>NSAllowsArbitraryLoads</key>
    <false/>
</dict>

My app consuming APIs and displaying data on views, there is a page in my app where I set server url like https://liveserver.com and http://localserver.com, but when I set url http://localserver.com it still working. And It still working with true value. Kindly give me suggestion how to block All HTTP urls and app will only work with HTTPS.

Thanks

Answer 1

Try with:

<key>NSAppTransportSecurity</key>
<dict>
    <key>NSExceptionDomains</key>
    <dict>
        <key>domain.com</key>
        <dict>
            <!--Include to allow subdomains-->
            <key>NSIncludesSubdomains</key>
            <true/>
            <!--Include to allow HTTP requests-->
            <key>NSTemporaryExceptionAllowsInsecureHTTPLoads</key>
            <true/>
            <!--Include to specify minimum TLS version-->
            <key>NSTemporaryExceptionMinimumTLSVersion</key>
            <string>TLSv1.1</string>
        </dict>
    </dict>
</dict>

For Block all HTTP try

<key>NSAppTransportSecurity</key>
  <dict>
    <key>NSAllowsArbitraryLoads</key>
    <false/>
    <key>NSExceptionDomains</key>
    <dict>
     <key>*</key>
    <dict>
        <key>NSExceptionAllowsInsecureHTTPLoads</key>
        <false/>
    </dict>
  </dict>
 </dict>