Apple’s Fix for the In App Purchase Hack ⇥ developer.apple.com

Their fix is to allow developers access to non-public APIs:

This listing uses the symbols kSecTrustInfoExtendedValidationKey and SecTrustCopyInfo, which are not public API. Your app is allowed to use them for this specific purpose.

Via The Next Web.