What is the difference between NSExceptionAllowsInsecureHTTPLoads and NSThirdPartyExceptionAllowsInsecureHTTPLoads?
<p>In iOS 9, I can add keys to my info.plist to disable App Transport Security.  There are two keys, <code>NSExceptionAllowsInsecureHTTPLoads</code> and <code>NSThirdPartyExceptionAllowsInsecureHTTPLoads</code>, which are defined as:</p>

<blockquote>
  <p>An optional Boolean value that, when set to YES, allows insecure HTTP loads. Use this key to describe your app’s intended network behavior for a domain whose security attributes you have control over.</p>
</blockquote>

<p>and</p>

<blockquote>
  <p>A version of the NSExceptionAllowsInsecureHTTPLoads key to be used to configure connections to a domain whose security attributes you don’t control.</p>
</blockquote>

<p>What security attributes do they refer to?  Why does it matter what my <em>intentions</em> are?</p>

<p>What are the circumstances under which I'd use one of these rather than the other?</p>