X-Git-Url: https://gitweb.stoutner.com/?a=blobdiff_plain;f=app%2Fsrc%2Fmain%2Fres%2Fxml%2Fnetwork_security_config.xml;h=16a90b5cca58ba736d2cb2042bd3804a4420eef1;hb=ca7516a7edb9e06d0f9fe9186513986cd82be716;hp=e7ed677fd2823c699e6e99b406fdacb880c51a3e;hpb=06f516f2f5c745981e292451d01b9df7d1fd57eb;p=PrivacyBrowserAndroid.git

diff --git a/app/src/main/res/xml/network_security_config.xml b/app/src/main/res/xml/network_security_config.xml
index e7ed677f..16a90b5c 100644
--- a/app/src/main/res/xml/network_security_config.xml
+++ b/app/src/main/res/xml/network_security_config.xml
@@ -18,7 +18,7 @@
   You should have received a copy of the GNU General Public License
   along with Privacy Browser.  If not, see <http://www.gnu.org/licenses/>. -->
 
-<!-- Allow HTTP traffic. -->
+<!-- Allow HTTP traffic and disable HSTS, which has no benefit for Privacy Browser (because unspecified links default to HTTPS) but has negative fingerprinting implications. -->
 <network-security-config>
-    <base-config cleartextTrafficPermitted="true" />
+    <base-config cleartextTrafficPermitted="true" hstsEnforced="false" />
 </network-security-config>
\ No newline at end of file