iTunes Doesn't Encrypt Downloads—on Purpose

The push to encrypt traffic throughout the web has resulted in safer and more secure browsing across millions of sites. But not everywhere uses the so-called Transport Layer Security that keeps HTTPS-enabled sites safe from prying eyes. Including, it turns out, Apple’s iTunes and iOS App Store infrastructure, which runs its downloads over unencrypted connections. Typically you can tell when a website uses HTTPS encryption by the little green padlock on the left side of the URL bar. Learn about your ad choices: dovetail.prx.org/ad-choices