Android network security config (aka "How to monitor https traffic from Android")
·Nov 19, 2020·
1 min read
Starting at around version 7 or 8 (I can't recall and am too lazy to look it up right now), the Android OS started putting restrictions on the ability to monitor https requests from apps. Luckily, it's fairly easy to create debug builds that allow this.
app/src/debug/res/xml/network_security_config.xml, add this:
<network-security-config> <base-config> <trust-anchors> <certificates src="system" /> <certificates src="user" /> </trust-anchors> </base-config> </network-security-config>
app/src/debug/AndroidManifest.xml, add this:
<application android:networkSecurityConfig="@xml/network_security_config" />
More details at https://developer.android.com/training/articles/security-config.