'Network security configuration

What is the purpose of network security configuration , I know that http is not secure and when we want even to use that in our app we then use network security configuration but what does it really do?



Solution 1:[1]

Network security configuration

The Network Security Configuration feature lets apps customize their network security settings in a safe, declarative configuration file without modifying app code. These settings can be configured for specific domains and for a specific app. The key capabilities of this feature are as follows:

  • Custom trust anchors: Customize which Certificate Authorities (CA) are trusted for an app's secure connections. For example, trusting particular self-signed certificates or restricting the set of public CAs that the app trusts.

  • Debug-only overrides: Safely debug secure connections in an app without added risk to the installed base.

  • Cleartext traffic opt-out: Protect apps from accidental usage of cleartext traffic.

  • Certificate pinning: Restrict an app's secure connection to particular certificates.

Details here: Documentation

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source
Solution 1 Nicola Gallazzi