Use Network Security Configuration to Secure TLS Connections

[U8NWXD]

Setup a Network Security Configuration to strengthen the security of the app's TLS-secured connections by:

• Opting out of clear-text traffic to prevent accidental insecure connections
• Pinning CultureMesh's certificate into the app. This prevents rogue or compromised CAs from generating certificates our app will trust.
  • Warning: This requires careful planning, as if the keys change or are revoked, the app could refuse to accept the replacement keys. Backup keys may help with this.

[U8NWXD]

Apparently this is only available since API v24, and our current minimum is v19. I will leave this issue open in case there is a better way to do certificate pinning, but downgrade its priority.