Google is bringing in new network security features as part of Android 17, with support for Encrypted Client Hello (ECH), a privacy standard that prevents network operators from seeing the domains a user visits.
ECH works in conjunction with private DNS to obscure profiling data, such as the names of the websites visited, by encrypting the part of the TLS handshake that reveals the hostname of the site contacted.
In Android 17, this protection is built into the platform and is turned on by default for applications targeting Android 17 that use a networking library that is compatible.
The update also includes Local Network Protection, Certificate Transparency by default, and automatic blocking of 2G.
Android 17 Adds Encrypted Client Hello, Local Network Protection, and Automatic 2G Blocking - gHacks Tech News
Android 17 adds Encrypted Client Hello to hide visited domains from ISPs, plus local network permissions and automatic 2G shutoff.