Flutter Question posted in
The official Flutter documentation can be found here.

Is it safe to use android:usesCleartextTraffic="true" in flutter?

While using the model_viewer_plus: ^1.8.0 plugin, it asks to set android:usesCleartextTraffic to true.

There is a concern about safety about this .Does this lead to any security risks in the app because of using HTTP connection?

Tags:

2

Answers


  1. 0

    Using android:usesCleartextTraffic="true" in Flutter can pose security risks by allowing unencrypted HTTP traffic, so it’s recommended to use HTTPS whenever possible.

    Login or Signup to reply.
  2. 0

    No. As the property suggests, this allows traffic via HTTP, which is not encrypted. This in turn means that everyone between sender and receiver can see what is being sent. If you sign in using HTTP only, everyone will know your password.

    In 2024, there should be no need outside of development to use HTTP as frontend-backend communication protocol.

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search