<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
  <base-config cleartextTrafficPermitted="true">
    <trust-anchors>
      <certificates src="system"/>
      <certificates src="user"/> <!-- opt-in to user-installed CAs -->
    </trust-anchors>
  </base-config>
</network-security-config>
