Security Alert in Android App

Question

For one of my App, I got the security alert in android developer console. I do not use http request. I am not sure about the AD network like Admob and Facebook which uses this.

Any specific code / gradle setup is needed for this ?

How to solve this issue and come out of security alert ?

Answer 1

X509TrustManager is an interface which is used to trust all the certificates. If this interface being used anywhere in your app (though you're not using it directly there might be chances that third-party lib using it).So make sure you don't use it which is vulnerable for man-in-the-middle attack.

How to solve this issue and come out of security alert?

Search for X509TrustManager and remove it's corresponding usage and imports.

and ugrade the version code of your app upload it to playstore.

Refer : X509TrustManager and Google help center