diff --git a/app/src/main/res/xml/network_security_config.xml b/app/src/main/res/xml/network_security_config.xml
index 6f9486e58ea..622177b1076 100644
--- a/app/src/main/res/xml/network_security_config.xml
+++ b/app/src/main/res/xml/network_security_config.xml
@@ -6,9 +6,11 @@
   ~ SPDX-License-Identifier: GPL-3.0-or-later
 -->
 <network-security-config>
+    <!-- Allowing cleartextTrafficPermitted - we don't control the server yet strongly suggesting TLS/SSL -->
     <base-config cleartextTrafficPermitted="true">
         <trust-anchors>
             <certificates src="system"/>
+            <!-- We allow user-certificates so managed device can make use of self-signed/client certificates -->
             <certificates src="user"/>
         </trust-anchors>
     </base-config>