Android : Unsafe SSL socket

The application creates a socket without checking the SSL parameters. This makes the application vulnerable to man in the middle attacks.

The createSocket() method with a parameter of the InetAddress type does not provide domain verification. The getInsecure() method returns the socket without any SSL checks. In both cases there is a risk of valuable data confidentiality loss.