question

anatolyl avatar image
anatolyl asked

Amazon Ads iOS and ATS issue, need to fix the SDK

Hello I'm using the most recent SDK for iOS and I see that the SDK makes calls to non secure urls for Amazon ad servers. This behavior is not compatible with iOS 9 transport security. I know that here is a suggested temporary workaround from September to config the app as pre-iOS 9 but why is it still not fixed in the most latest SDK? Please fix it! All calls should be https. I don't want to use the hack to config my app as pre -iOS 9? Should be easy to do on the Amazon side.
mobile ads
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Ross@Amazon avatar image
Ross@Amazon answered
Unfortunately, supporting App Transport Layer Security is not as simple as switching all the calls over to https. Server side changes are required for the many different services that our SDK uses. While these changes are taking some time, we assure you we are working to address this as quickly as possible.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

anatolyl avatar image
anatolyl answered
Thanks for your reply. Obviously you need to purchase a SSL certificate and configure the server-side and then release a new https only SDK. This could be max a one day work for a single person. Usually a couple of hours IMHO. The fact that we're in 02/2016 and ATS was introduced on 09/2015. The question is does Amazon Ads team seriously have plans to maintain the iOS SDK or alternatively there are plans to deprecate it in the near future. Besides the ATS issue there are many other issues in iOS SDK among them: - it compiles with hundreds of warnings in xcode (marked as "known issue"). You can't seriously release an SDK like this. - support for iOS 6 is deprecated in the latest SDK version. Seems like the team behind the iOS SDK doesn't understand that they develop the SDK. This breaking change forces developers to drop support for iOS 6 for their app. Why is that? There is no big difference between iOS 6 and iOS 7 to drop support without a reason.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Ross@Amazon avatar image
Ross@Amazon answered
Unfortunately, there is not really any more information that we can provide on the ATS issue. At this point in time less than 1% of our users are running iOS 6 and Apple no longer supports iOS 6 or 7 in its latest version of Xcode. For these reasons we have made the decision to stop supporting iOS 6, which allowed us to remove many deprecated API calls.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

anatolyl avatar image
anatolyl answered
[quote] and Apple no longer supports iOS 6 or 7 in its latest version of Xcode [/quote] This statement is not correct. I have the latest version of XCode (7.2.1) and iOS 6.0 and above is supported. There are many Apple devices in use that are not upgrade-able to iOS 7+. Your SDK compiles with hundreds of warnings and it is less functional than your Android SDK. I think these are the reasons that established apps don't use your SDK on iOS.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

anatolyl avatar image
anatolyl answered
[quote] Unfortunately, there is not really any more information that we can provide on the ATS issue. [/quote] Do you have any ETA when the ATS issue is planned to be fixed? thank you
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Levon@Amazon avatar image
Levon@Amazon answered
Hi Anatoly, The Amazon Mobile Ad Network is fully committed to the security of publishers' apps, users and advertisers. Fully migrating to ATS takes time since the entire advertising ecosystem must transition to HTTPS. Until then, we recommend configuring your app to behave as a pre-iOS 9 app. Click here for details: https://developer.amazon.com/appsandservices/apis/earn/mobile-ads/ios/docs/ios-9-app-transport-security
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

anatolyl avatar image
anatolyl answered
Hi Levon@Amazon From what I can observe all requests are going from the SDK to the Amazon servers, they are not going to the "eco-system". So you just have to change the SDK to be https. It doesn't take time. Your recommendation to configure the app as a pre-iOS 9 app will have bad impact on the app rankings and availability in the Appstore. This temporary config was introduced by Apple solely for the purpose of briefly make the app work for those users who have already upgraded their devices to the iOS9 while developers still work on the iOS 9 compliance update. This feature was intended to be used during the launch period of iOS9 in September 2015.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.