Allowing User Certificates

Allowing User Certificates

Allowing user certificates could allow eavesdroppers to intercept data sent by your app, 'which could impact the privacy of your users. Consider nesting your app's trust-anchors inside a <debug-overrides> element to make sure they are only available when android:debuggable is set to "true".

Issue id: AcceptsUserCertificates

https://goo.gle/AcceptsUserCertificates

https://developer.android.com/training/articles/security-config#TrustingDebugCa