iOS App Transport Security (ATS) Bypass

ATS is the iOS rule that says every connection an app makes must be modern HTTPS — and developers turn it off more often than they admit. This walks the per-connection policy engine, the exact Info.plist keys that punch holes in it (NSAllowsArbitraryLoads and friends), how an assessor reads the real posture out of an IPA they are scoped to test, and how to put the protection back the way Apple intended.