Android 17 Adds Encrypted ClientHello to Curb Web Traffic Snooping
Google has detailed a batch of network security upgrades coming in Android 17, headlined by support for Encrypted ClientHello (ECH). ECH encrypts the initial handshake step of a TLS connection, which today can leak the domain name you're connecting to even over otherwise-secure HTTPS. By hiding that metadata, ISPs, network operators, and anyone snooping on traffic have a much harder time building a picture of your browsing habits.
Alongside ECH, Android 17 is expected to tighten protections against known cellular network vulnerabilities, such as attacks that exploit weaknesses in how devices connect to cell towers, and to add safeguards for home network privacy, likely limiting how much local devices can passively fingerprint or track phones on the same Wi-Fi network.
These changes build on a broader industry push, already seen in browsers like Chrome and Firefox, to encrypt more of the connection process rather than leaving metadata exposed.