I have an application that can send HTTP requests (It uses Alamofire to achieve this). The problem I have is that the URL I'm using isn't secure, it is our company API for connected devices.
At the moment the user has to manually visit the API and trust it, then add a random certificate to keychain... Not very elegant.
I've created my own SessionManager : Alamofire.SessionManager
and used .disableEvaluation
on the URL, it is listed in the info.plist
under App Transport Security Settings -> Exception Domains
. All correctly formatted to the best of my knowledge. None of it prevents to user having to manually visit the site to trust it.
Anyone got any ideas?