There are several ways[1] for an Android app to trust a CA: - by default, using the system installed CAs - if specified in the app manifest, it can trust the

There are several ways[1] for an Android app to trust a CA: - by default, using the system installed CAs - if specified in the app manifest, it can trust the user installed CAs - included with the app, also in the manifest, it can trust any CA the author of the app decided to trust [1] https://developer.android.com/training/articles/security-config https://developer.android.com/training/articles/security-con...