Question

I’m getting ready to finally deploy my first iPhone app. The app uses SSL to connect to a REST web service. While reading the docs on deploying the app to the app store, I came across some drivel regarding having to go through a 30 – 60 day government vetting process just to ship an app that simply connects to an HTTPS server.

My question is, since this is an export requirement, do apps that are only distributed in the US face this same restriction?

Thanks

Answer 1

According to The Animail, yes, you have to go through export compliance, even if you only make an HTTPS connection in your app.

Note this part, though, which may ease your pain:

The only relief that Apple can offer is that if you agree (in written) to go through with the CCATS process and you’ve already submitted your application to the Government, Apple lets you start selling your app in the U.S. and Canada, adding more countries in a second step and finally opening all for sale when approval is obtained.

Perhaps Apple will be satisfied with the same written promise to only distribute in the U.S. and allow you to sell without the export review, but I’d definitely check with Apple and not assume anything.

Zetetic has an extensive post that explains the entire process for obtaining export certification.