X-Git-Url: https://gitweb.stoutner.com/?p=PrivacyBrowserAndroid.git;a=blobdiff_plain;f=app%2Fsrc%2Fmain%2Fres%2Fxml%2Fnetwork_security_config.xml;h=16a90b5cca58ba736d2cb2042bd3804a4420eef1;hp=e7ed677fd2823c699e6e99b406fdacb880c51a3e;hb=1d7c85bd38913da7912b52c15c213b14d8fd528d;hpb=424ab40e495fed0fd1fe4109be466206d64ae6be

diff --git a/app/src/main/res/xml/network_security_config.xml b/app/src/main/res/xml/network_security_config.xml
index e7ed677f..16a90b5c 100644
--- a/app/src/main/res/xml/network_security_config.xml
+++ b/app/src/main/res/xml/network_security_config.xml
@@ -18,7 +18,7 @@
   You should have received a copy of the GNU General Public License
   along with Privacy Browser.  If not, see <http://www.gnu.org/licenses/>. -->
 
-<!-- Allow HTTP traffic. -->
+<!-- Allow HTTP traffic and disable HSTS, which has no benefit for Privacy Browser (because unspecified links default to HTTPS) but has negative fingerprinting implications. -->
 <network-security-config>
-    <base-config cleartextTrafficPermitted="true" />
+    <base-config cleartextTrafficPermitted="true" hstsEnforced="false" />
 </network-security-config>
\ No newline at end of file