Google announced new network security protections in Android 17 to improve connection privacy, including support for Encrypted Client Hello (ECH), which helps hide the websites and apps users access from network observers. The update also strengthens local network permissions, enables Certificate Transparency by default, and lets carriers disable 2G to reduce downgrade attacks and exposure to rogue base stations and SMS blasters. #Android17 #EncryptedClientHello #ECH #ECHGREASE #OkHttp #CertificateTransparency #SMSblasters
Keypoints
- Android 17 adds support for Encrypted Client Hello to hide website destinations.
- ECH works with private DNS to obscure domain names and reduce metadata exposure.
- ECH GREASE is enabled by default to make all connection requests look the same.
- Local Network Protection now requires apps to request permission before scanning local devices.
- Android 17 enables Certificate Transparency by default and allows carriers to disable 2G to block downgrade attacks.
Read More: https://thehackernews.com/2026/08/android-17-adds-os-wide-ech-to-hide.html