I asked Apple the very same question and got the answer (from a Sr. Export Compliance Specialist), that "sending information over https is forcing the data to go through a secure channel from SSL, therefore it falls under the U.S. Government requirement for a CCATS review and approval." Note that it doesn't matter that Apple has already done this for their SSL implementation, but for the government, if you USE encryption that is the same (to them) as you would've coded it yourself. I also updated our blog (http://blog.theanimail.com) since Tim linked to it with updates and details on the process. Hope that helps.

以正确的方式获得应用批准并不难。SSL (HTTPS/TLS)仍然是加密，除非您只是将其用于身份验证，否则您应该获得适当的批准。我刚刚获得了批准，我的应用程序现在已经在商店中使用SSL加密数据流量(而不仅仅是身份验证)。

下面是我写的一篇博客文章，这样其他人就可以用正确的方法来做这件事。

苹果iTunes出口限制

我发现这个来自美国工业和安全局的常见问题解答非常有用。

加密

问题15(什么是注释4?)是重点:

...

被注释4排除在第2部分第5类中的项目包括但不限于以下项目:

消费者应用程序。一些例子:

piracy and theft prevention for software or music; music, movies, tunes/music, digital photos – players, recorders and organizers games/gaming – devices, runtime software, HDMI and other component interfaces, development tools LCD TV, Blu-ray / DVD, video on demand (VoD), cinema, digital video recorders (DVRs) / personal video recorders (PVRs) – devices, on-line media guides, commercial content integrity and protection, HDMI and other component interfaces (not videoconferencing); printers, copiers, scanners, digital cameras, Internet cameras – including parts and sub-assemblies household utilities and appliances

简单的回答:是的，但是你不需要做任何事情

我在网上找了好几个小时。实际上这很简单，你可以在itunes connect中验证:

1. 你要做的就是

如果你的应用只使用HTTPS或仅使用加密进行身份验证、令牌等，你不需要做什么，只需要包含

<key>ITSAppUsesNonExemptEncryption</key><false/>

在你的信息。去吧，你完蛋了。

2. 验证

你可以在itunes connect中验证这一点。

选择你的应用 选择功能 选择加密 点击“+” 跟着对话 对于HTTPS或认证，答案是肯定的

在任何情况下，你当然都应该仔细阅读对话。

一篇非常有用的文章可以在这里找到:

https://www.cocoanetics.com/2017/02/itunes-connect-encryption-info/

自2016年9月20日起，使用https(或其他形式的加密)的应用程序不再需要注册:https://web.archive.org/web/20170312060607/https://www.bis.doc.gov/index.php/informationsecurity2016-updates

事实上，在SNAP-R上，您不能再选择“加密注册”:

他们特别指出:

加密注册不再需要-一些信息 从登记到第8号增补到第742部分 报告。

这意味着你可能需要向BIS发送年度报告，但你不需要注册，你可以在提交应用时注明它是免税的。

I asked Apple the very same question and got the answer (from a Sr. Export Compliance Specialist), that "sending information over https is forcing the data to go through a secure channel from SSL, therefore it falls under the U.S. Government requirement for a CCATS review and approval." Note that it doesn't matter that Apple has already done this for their SSL implementation, but for the government, if you USE encryption that is the same (to them) as you would've coded it yourself. I also updated our blog (http://blog.theanimail.com) since Tim linked to it with updates and details on the process. Hope that helps.