App Store - 帮助回答“缺少合规性"(使用 Expo + Firebase) [英] App Store - Help answering "Missing Compliance" (using Expo + Firebase)

问题描述

我正在将我的应用发布到 App Store，但我对缺少合规性"有疑问步骤.

以下是有关该应用的一些信息:

• 我使用了
  2. 您的应用是否符合美国出口管理条例第 5 部分第 2 部分规定的任何豁免条件?.我的应用程序是一个简单的 JS 视频游戏，带有 MobAds.我应该说是还是不是?
  3. 您的应用是否实施了任何专有的加密算法或不被国际标准机构(IEEE、IETF、ITU 等)接受为标准的加密算法?我确实说没有……是吗??
  4. 您的应用是否实施了任何标准加密算法，以代替或补充使用或访问 Apple 操作系统中的加密?如果我说不，它会显示一条关于 HTTPS 的额外消息.我的应用确实将 HTTPS 用于 Firebase(数据库、存储和分析)和 Sentry.
  5. 最后，如果我说是，它会说:目前无法测试 0.1.0 (1) 版，因为该版本没有相关的出口合规文档. 我在哪里可以找到此文档我怎样才能得到它?我来自欧洲的葡萄牙.

  谢谢！

  ---

  解决方案

  问题一.回复是的，您使用 HTTPS 加密进行连接

  问题二.对于您对您的应用程序感到难过的答复是否定的.简而言之，您不会在您的应用程序中使用任何使用自定义加密的功能，或者它是严格的医疗应用程序.您使用的加密仅针对从应用程序到服务器的数据传递，您的应用程序内部没有任何内容被加密.

  问题三.不，您不使用自定义加密算法.这通常用于应用内的银行应用数据.

  问题四.说不.美国规则为仅具有 HTTPS 调用的应用程序提供了例外(这就是您所做的).阅读此处了解完整说明:

  https://developer.apple.com/forums/thread/98071https://www.cocoanetics.com/2017/02/itunes-连接加密信息/

  I'm publishing my app to App Store and I have doubts regarding the "Missing Compliance" step.

  Here's some info about the app:

  • I used Expo (Managed workflow). That means I don't have direct access to Xcode.
  • It's a simple 2D video game, free, with Expo ADMob. You can pay to remove Ads.
  • It requests a camera and library permission (to take a picture if the player wants). No Notifications, or any other extra thing.
  • It uses Firebase (Database, Storage, and Analytics) and Sentry. (for HTTPS connections)
  • I didn't manually include any "encryption" custom thing (that I'm aware of)
  • I'm publishing the App from Portugal, Europe. I plan to publish it worldwide, if possible.
  1. Does your app use encryption? I didn't code anything related to it... but I assume I should say yes, right?
  2. Does your app qualify for any of the exemptions provided in Category 5, Part 2 of the U.S. Export Administration Regulations?. My app is a simple JS video game, with MobAds. Should I say yes or no?
  3. Does your app implement any encryption algorithms that are proprietary or not accepted as standards by international standard bodies (IEEE, IETF, ITU, etc.)? I did say no... is it right?
  4. Does your app implement any standard encryption algorithms instead of, or in addition to, using or accessing the encryption within Apple’s operating system? If I say no, it shows an extra message about HTTPS. My app does use HTTPS for Firebase (Database, Storage, and Analytics) and Sentry.
  5. Finally, if I say yes, it says: Version 0.1.0 (1) cannot be tested at this time because the build does not have associated export compliance documentation. Where do I find this documentation and how can I get it? I'm from Portugal, Europe.

  Thank you!

  ---

  解决方案

  Question one. Reply yes, you use HTTPS encryption for connections

  Question two. For what you sad about your app the reply is no. In brief you don't use any function inside your app that use a custom cryptography or it's strictly medical app. The encryption that you use it's only on data pass from app to server, nothing inside your app all or a part is encrypted.

  Question three. No you don use a custom crypt algorithm. That is usually used for bank app data inside the app.

  Question four. Say no. The US rules give an exception for apps with only HTTPS calls (that is what you do). Read here for a full explanation:

  https://developer.apple.com/forums/thread/98071 https://www.cocoanetics.com/2017/02/itunes-connect-encryption-info/

  这篇关于App Store - 帮助回答“缺少合规性"(使用 Expo + Firebase)的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！