Full threadancarda·Shouldn't this be covered by App Transport Security? Outbound HTTP connections should be dropped, right?View on HN