Cleartext HTTP traffic not permitted

• 22 February 2022
• android

Retrofit error #

Starting with Android 9 (API level 28), cleartext support is disabled by default. Hence, we need to explicitly enable cleartext traffic for our http only test server.

Network security config #

Create a /res/xml/network_security_config.xml file and add a domain config like below

    <?xml version="1.0" encoding="utf-8"?>
    <network-security-config>
        <domain-config cleartextTrafficPermitted="true">
            <domain includeSubdomains="true">api.test.com</domain>
        </domain-config>
    </network-security-config>

References #

• https://codechacha.com/en/android-cleartext-http-traffic-issue/
• https://developer.android.com/training/articles/security-config#CleartextTrafficPermitted

• Next: Check if an apk is signed with debug or release key