this inconvenience has single-handedly made this new phone the black sheep of my entire local network
it works, but i have to apply several hacks in order to make it work. this is painful. android PLEASE just provide an API for system-level DNS resolution and certificate verification