From API 28 cleartext traffic is by default denied. This means that HTTP connections with Kodi fail to download files through the download manager.
To support connecting to Kodi over SSL using self-signed certificates we need to allow this explicitly for Android versions 6 and higher.