App Transport Security & HTTPS

402 views
Skip to first unread message

Branch

unread,
May 18, 2016, 8:13:59 PM5/18/16
to Google Mobile Ads SDK Developers
Hi!

If I have "serve all ads over HTTPS" enabled in AdMob Settings, do I need to disable ATS?

Also, how long until HTTPS is required? It's just common sense at this point.

Thanks!
Branch

Vu Chau (Mobile Ads SDK Team)

unread,
May 19, 2016, 9:59:44 AM5/19/16
to Google Mobile Ads SDK Developers
Hi there,

I'd imagine enabling the setting to serve all ads over HTTPS would nullify the need to enable ATS in your build.  However, I'm not sure as in the case of mediation, since some mediation networks might still be serving ads over a non-HTTPS connection.  Theoretically you can mediate with endless third-party networks if you write a custom event, so there would be no supervision over what security the partners might use.

So, what I'd say is, if you notice your ads aren't serving, add the ATS exception back in and see if that has an effect.  I wouldn't be able to speak on when HTTPS will be the default, but I can say we are serious about universally implementing it.

Vu Chau
Mobile Ads SDK Team

Branch

unread,
May 19, 2016, 10:18:32 AM5/19/16
to Google Mobile Ads SDK Developers
Well I don't use mediation (rather, I won't when iAd shuts down in a month) so that's not an issue. HTTPS should be a requirement.

I'll try enabling ATS and seeing if ads still show.

Vu Chau (Mobile Ads SDK Team)

unread,
May 19, 2016, 12:26:38 PM5/19/16
to Google Mobile Ads SDK Developers
Cool! Let us know if you need anything else.

FYI, in our sample project, we have the ATS exception added if you need it.

Vu Chau
Mobile Ads SDK Team

Branch

unread,
Jun 18, 2016, 9:38:16 PM6/18/16
to Google Mobile Ads SDK Developers
Just wanted to see if there's an update on this as iOS 10 removes the ability to disable ATS-- it's now fully required.

This means the AdMob SDK will have to require HTTPS (which is a good thing).

Thanks!
Branch


On Wednesday, May 18, 2016 at 8:13:59 PM UTC-4, Branch wrote:

Vu Chau (Mobile Ads SDK Team)

unread,
Jun 20, 2016, 2:20:31 PM6/20/16
to Google Mobile Ads SDK Developers
Hi Branch,

Thanks for the follow-up.  We are aware of the upcoming change in iOS 10, but at this time we don't have any additional information on steps to be taken.

Vu Chau
Mobile Ads SDK Team

Branch

unread,
Aug 15, 2016, 2:31:25 PM8/15/16
to Google Mobile Ads SDK Developers
Any update on this? Again, iOS 10 removes the ability to disable ATS-- it's now fully required. 

That means either AdMob has to go full HTTPS or it won't work.

Vu Chau (Mobile Ads SDK Team)

unread,
Aug 15, 2016, 2:51:32 PM8/15/16
to Google Mobile Ads SDK Developers
Hi Branch,

We are aware of the security requirement in iOS 10, and are working on making the SDK fully compatible with it.
When ATS comes into effect at the end of 2016, the security mechanism used by the SDK will meet the requirement.

Vu Chau
Mobile Ads SDK Team

Sally Holt

unread,
Sep 11, 2016, 9:15:24 AM9/11/16
to Google Mobile Ads SDK Developers
Hello,

Now that iOS 10 is due end of September (not end of 2016), does the admob api support ATS?

Thank you.

Vu Chau (Mobile Ads SDK Team)

unread,
Sep 12, 2016, 2:14:37 PM9/12/16
to Google Mobile Ads SDK Developers
Hi Sally,

While iOS 10 is being released soon, the said end-of-2016 deadline was meant to refer to the ATS requirement.  With that in mind, the SDK will fully support ATS.

Vu Chau
Mobile Ads SDK Team

Ismael Machado

unread,
Nov 28, 2018, 8:09:41 PM11/28/18
to Google Mobile Ads SDK Developers
Hi Sally, where is the setting to "serve all ads over HTTPS" ??

mobileadssdk-a...@google.com

unread,
Nov 29, 2018, 2:55:21 AM11/29/18
to Ismael Machado, Google Mobile Ads SDK Developers
Hi Ismael,

Let's continue the discussion in this thread.

Regards,
Ivan Bautista
Mobile Ads SDK Team



--

---
You received this message because you are subscribed to the Google Groups "Google Mobile Ads SDK Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-admob-ads-sdk+unsub...@googlegroups.com.
To post to this group, send email to google-admob-ads-sdk@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-admob-ads-sdk/9ee18fdc-2238-40e9-97bd-991fcd94bb6d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Reply all
Reply to author
Forward
0 new messages