No, Android doesn't. Some apps do. And in many cases, the pinning code can be removed in real time with Frida. Please don't spread misinformation.
The only ways your certificate works are:
* Your self signed certificates are marked as trusted in the app manifest (which, since it isn't your app, you have to rebuild an APK to modify the network_security_config)
* There's a leftover "accept everything" in the manifest, and that can only work with debug builds.
* You ran it through apktool/equivalent to insert a permissive network_security_config (which only has this ability since 2022, but other scripts have existed before).
Running it through Frida for that purpose is needlessly overkill.
Please know your shit.
/system/etc/security/cacerts
which unlocks most current Android apps. so maybe learn your own tactics, before commenting further.yeah it can. you just mount it as tmpfs.