title: Flutter: Android "network-security-config"
body: <p>I have setup following to test the Flutter's network security based on the <a href="https://developer.android.com/training/articles/security-config#additional-resources-codelabs" rel="nofollow noreferrer">Android document</a> in order to implement <strong>Certificate Pinning:</strong></p>
  
  <p>Note that I specified the <code>domain-config</code> for <code>api.somesite.com</code>. So the app should only accept <code>somesite.com</code> certificate.</p>
  
  <p>Note that <code>android:networkSecurityConfig="@xml/network_security_config"</code> is set in the <code>AndroidManifest.xml</code>.</p>
  
  <p>In order to test the pinning certificate, I have two HTTP calls to two endpoints. One is from <code>api.somesite.com</code> and another is a random api.</p>
  
  <p>However, both API endpoints work using the network security setting.</p>
  
  <p>I am not sure what I am doing wrong and why following the Android document for pinning certificate doesn't seem to have any effect on flutter itself.</p>
  
  <p>Any help would be much appreciated.</p>