title: Codename one Application Network Security & Other Questions
body: <p>I have implemented one enterprise application using codename one framework  but the application is accepting a self signing certificate from trusted CA, which is know as a certificate pinning vulnerability.</p>
  
  <p>So, How can I disallow the application to accept all certificates such as
  org.apache.http.conn.ssl.AllowAllHostnameVerifier or SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER ?</p>
  
  <p>And also how can I remove permission WRITE_EXTERNAL_STORAGE and I have also observed there is one unknown permission is there com.google.android.c2dm.permission.RECEIVE. How can I remove this ?</p>
  
  <p>Moreover, How can I disabled debuggable flag for android in codename one and how to protect binary so that no one can reverse-engineered.</p>
  
  <p>Thanks,</p>