1<?xml version="1.0" encoding="utf-8"?>
2<network-security-config>
3  <!-- default config that trusts nothing. Will always cause TLS errors -->
4  <base-config>
5    <trust-anchors>
6    </trust-anchors>
7  </base-config>
8  <!-- debug override that trusts the system CA store. Connections will work as normal when the
9       application is debuggable. -->
10  <debug-overrides>
11    <trust-anchors>
12      <certificates src="system" />
13    </trust-anchors>
14  </debug-overrides>
15</network-security-config>
16