1 <?xml version="1.0" encoding="utf-8"?> 2 <network-security-config> 3 <!-- Entry with a bad pin. Connections to this will only succeed if overridePins is set. --> 4 <domain-config> 5 <domain>android.com</domain> 6 <pin-set> 7 <pin digest="SHA-256">aaaaaaaaIAq2Y49orFOOQKurWxmmSFZhBCoQYcRhJ3Y=</pin> 8 </pin-set> 9 <trust-anchors> 10 <certificates src="system" overridePins="false" /> 11 </trust-anchors> 12 </domain-config> 13 <!-- override that contains all of the system CA store. This should completely override the 14 anchors in the domain config-above with ones that have overridePins set. --> 15 <debug-overrides> 16 <trust-anchors> 17 <certificates src="system" /> 18 </trust-anchors> 19 </debug-overrides> 20 </network-security-config> 21
