1 <?xml version="1.0" encoding="utf-8"?> 2 <network-security-config> 3 <domain-config> 4 <domain includeSubdomains="true">android.com</domain> 5 <trust-anchors> 6 <certificates src="system" /> 7 </trust-anchors> 8 <!-- nested config that adds pins --> 9 <domain-config> 10 <domain>developer.android.com</domain> 11 <pin-set> 12 <pin digest="SHA-256">7HIpactkIAq2Y49orFOOQKurWxmmSFZhBCoQYcRhJ3Y=</pin> 13 </pin-set> 14 </domain-config> 15 </domain-config> 16 <base-config cleartextTrafficPermitted="false"> 17 </base-config> 18 </network-security-config> 19
