vetkit.ios.ats.legacy-tls

An App Transport Security exception lowers the minimum TLS version to 1.0 or 1.1 for a host. These versions are deprecated (RFC 8996) and weaken the connection.

Last updated: 2026-11-01

Suite: Security

regex

An App Transport Security exception lowers the minimum TLS version to 1.0 or 1.1 for a host. These versions are deprecated (RFC 8996) and weaken the connection.

Category: SECURITY · Engine rule severity: WARNING

How to fix it

Remove NSExceptionMinimumTLSVersion (TLS 1.2 is the default) and upgrade the server.

References

https://developer.apple.com/documentation/bundleresources/information-property-list/nsapptransportsecurity/nsexceptiondomains
https://datatracker.ietf.org/doc/html/rfc8996

Source: packages/engine/rules/sast/mobile.yml.

Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.