What is ATS and how does iOS validate a TLS connection?
Essence
App Transport Security (ATS, iOS 9+) is a policy of the URL Loading System (URLSession, WKWebView, media): by default it forbids unencrypted HTTP and weak TLS settings. Its job is to make sure an app can't "accidentally" send data in plain text or over an outdated protocol.
The rest of this answer, with code and interview follow-ups, is in the DevPrep app.
Read the full answer in DevPrep