This is what the Google team have replied: Thanks for contacting Google Play Developer Support. I understand you have some questions about the SslErrorHandler security vulnerability. I took a look at your app, and version 1.0.0 of Coaching Wheel3 has the following class, which contains a vulnerable version of SslErrorHandler: File in APK: lib/armeabi-v7a/libCore.so Here’s how you can resolve this issue: To properly handle SSL certificate validation, change your code to invoke SslErrorHandler.proceed() whenever the certificate presented by the server meets your expectations, and invoke SslErrorHandler.cancel() otherwise. If you are using a 3rd party library that’s responsible for this, please notify the 3rd party and work with them to address the issue. After making changes, sign in to your Play Console and submit the updated version of your app. Make sure to increment the version number of your APK. Check back after five hours - we’ll show a warning message if the app hasn’t been updated correctly. I'm just looking through this now but to be frank, it's all new to me.
... View more