title: iOS HTTPS SSL Certificates
body: <p><strong>Scenario</strong> I am working on an application that needs to make use of <code>https</code> for network communication. Currently our user credentials (username, password...) are being sent in plain text over our URL. (ex. <code>http://www.myserver.com/service?username=USERNAME&amp;password=PASSWORD...</code>). This is not good for our client. I am new to using <code>https</code> and even newer to setting up an iOS app to use <code>https</code>. So I have a few questions:</p>
  
  <p><strong><em>assumption</em></strong>: I believe an iOS app must contain an SSL certificate to then be validated on the server side. Correct me if I'm wrong.</p>
  
  <p><strong>1)</strong> Where/How do I get a certificate?</p>
  
  <p><strong>2)</strong> How do I <em>import</em> the certificate into the application?</p>
  
  <p><strong>3)</strong> How do I validate the certificate with the one of server?</p>
  
  <p><strong>4)</strong> If the certificate is deemed invalid, how do I work around that?</p>
  
  <p>And if there is anything I am missing or misunderstanding please correct me.</p>