From 4d5793cf588603bc210ab9f23a4e7a6da530b5bb Mon Sep 17 00:00:00 2001
From: Andy Scherzinger <info@andy-scherzinger.de>
Date: Tue, 17 Mar 2026 13:07:29 +0100
Subject: [PATCH] docs: Add reasoning for the allowance of http as well as user
 certs

Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>
---
 app/src/main/res/xml/network_security_config.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/app/src/main/res/xml/network_security_config.xml b/app/src/main/res/xml/network_security_config.xml
index 6f9486e58ea..622177b1076 100644
--- a/app/src/main/res/xml/network_security_config.xml
+++ b/app/src/main/res/xml/network_security_config.xml
@@ -6,9 +6,11 @@
   ~ SPDX-License-Identifier: GPL-3.0-or-later
 -->
 <network-security-config>
+    <!-- Allowing cleartextTrafficPermitted - we don't control the server yet strongly suggesting TLS/SSL -->
     <base-config cleartextTrafficPermitted="true">
         <trust-anchors>
             <certificates src="system"/>
+            <!-- We allow user-certificates so managed device can make use of self-signed/client certificates -->
             <certificates src="user"/>
         </trust-anchors>
     </base-config>