That's not quite right. You will still have to justify every domain exception. > By the end of 2016, when your apps communicate with your own server back ends,

That's not quite right. You will still have to justify every domain exception. > By the end of 2016, when your apps communicate with your own server back ends, they must do so using a secure TLS channel using TLS 1.2, unless the data being communicated is bulk data such as media streaming and data that’s already encrypted. https://nakedsecurity.sophos.com/2016/06/17/apple-ios-to-require-https-for-apps-by-january/ https://nakedsecurity.sophos.com/2016/06/17/apple-ios-to-req...