title: What is the difference between NSExceptionAllowsInsecureHTTPLoads and NSThirdPartyExceptionAllowsInsecureHTTPLoads?
body: <p>In iOS 9, I can add keys to my info.plist to disable App Transport Security.  There are two keys, <code>NSExceptionAllowsInsecureHTTPLoads</code> and <code>NSThirdPartyExceptionAllowsInsecureHTTPLoads</code>, which are defined as:</p>
  
  <blockquote>
    <p>An optional Boolean value that, when set to YES, allows insecure HTTP loads. Use this key to describe your app’s intended network behavior for a domain whose security attributes you have control over.</p>
  </blockquote>
  
  <p>and</p>
  
  <blockquote>
    <p>A version of the NSExceptionAllowsInsecureHTTPLoads key to be used to configure connections to a domain whose security attributes you don’t control.</p>
  </blockquote>
  
  <p>What security attributes do they refer to?  Why does it matter what my <em>intentions</em> are?</p>
  
  <p>What are the circumstances under which I'd use one of these rather than the other?</p>