HTTP and HTTPS requirements

Swads connects to DSM over HTTP or HTTPS. Which protocol you can use depends on the address type, because iPhone and Mac allow plain HTTP only for certain addresses. Use HTTPS whenever possible.

Which protocol works with which address

This table follows Apple's App Transport Security (ATS) rules: ATS exempts IP addresses, unqualified host names, and .local domains from the HTTPS requirement, while ordinary domains must use HTTPS. See Apple's Supporting App Transport Security announcement.

When HTTP works

HTTP is fine for connections that stay inside your local network, such as a NAS IP address, an unqualified hostname, or a .local domain. For these, iPhone and Mac permit a plain HTTP connection without extra setup.

When you need HTTPS

An ordinary public domain must use HTTPS. For security, iPhone and Mac restrict unencrypted HTTP to local address types, so a public domain such as your-host.swads.app cannot connect over HTTP.

To use HTTPS with a public domain:

1. In DSM, assign a valid certificate to the domain or its reverse proxy entry.
2. Enter the domain and the HTTPS port (5001 by default) when you add the instance.
3. If the HTTPS connection fails, see HTTPS and certificate errors.