Android 17 adds Certificate Transparency checks for TLS certificates

Android 17 now natively validates Certificate Transparency: the OS checks that a TLS certificate contains a valid SCT and blocks the connection if it is not logged. Developers must enable CT in Network Security Config or risk Google Play rejection.

• Android 17 verifies SCTs in TLS certificates before connecting
• CT is enabled via network_security_config.xml and the certificate-transparency flag
• A new CertificateTransparency API is available for Kotlin and Java
• Apps without CT configuration may be rejected by Google Play