Included a HTTP (not HTTPS) URL link in my iOS App, do I need to disable App Transport Security?

Question

My iOS app included a privacy policy URL link, when users tap on it, it will open a HTTP (not HTTPS) page of my website in Safari, so do I need to disable App Transport Security for this?

<key>NSAppTransportSecurity</key>
<dict>
    <!--Include to allow all connections (DANGER)-->
    <key>NSAllowsArbitraryLoads</key>
        <true/>
    </dict>

Answer 1

No, you don't have to disable App Transport Security for opening HTTP URLs with UIApplication.open(_:), nor when you open it within an SFSafariViewController.

However, you do need to enable Allow Arbitrary Loads if you're planning to load a non-secure page in a WKWebView.