Android 17 enhances network privacy with Encrypted Client Hello

Google is introducing new network security protections in Android 17 to strengthen connection privacy, address cellular vulnerabilities, and protect the privacy of users’ home networks. Android 17 adds support for Encrypted Client Hello (ECH), a new privacy standard that operates in conjunction with private DNS to hide profiling metadata, including visited domain names, with further coverage provided by Bleeping Computer.

Encrypted Client Hello (ECH) is a privacy extension for TLS that encrypts the initial part of the TLS handshake, specifically the Server Name Indication (SNI), which previously revealed the contacted hostname. This prevents internet service providers and Wi-Fi operators from easily seeing which websites or apps users are accessing, even on secure HTTPS connections, thus hindering commercial profiling. ECH will be enabled by default for apps targeting Android 17 that use compatible networking libraries.

Google has also implemented adjustments to Local Network Protection, requiring apps to gain permission before scanning or connecting to local devices. Additionally, Android 17 enables Certificate Transparency by default, making forged certificates more evident. Participating mobile operators can now disable 2G for subscribers, reducing exposure to SMS blasters and rogue base stations. These updates aim to bolster user privacy and security across various network interactions.

Source: Bleeping Computer