Android 17 closes that gap with support for Encrypted Client Hello (ECH), a privacy standard that works together with private DNS to keep the destination hidden from outside observers<\/p>\n
Encrypted Client Hello (ECH) diagram<\/p>\n
ECH encrypts the domain name with a key only the destination server can unlock. Because support for ECH among web servers is still uneven, apps and browsers also need to send GREASE, a decoy version of the encrypted extension, so an outside observer can\u2019t tell which connections are protected just by looking at their shape<\/p>\n
Google says Android is the first major<\/a> mobile operating system to roll out broad ECH support, and it\u2019s working with Jigsaw (Google\u2019s internet safety unit) and app developers to speed up adoption<\/p>\n \u201cECH support for Android is a huge step towards closing one of the largest remaining structural privacy holes left on the Internet,\u201d said Nick Sullivan, Co-author of the ECH standard and Founder of Cryptography Consulting LLC<\/p>\n For apps targeting Android 17, ECH turns on by default, as long as the app runs on a networking library that supports it, such as newer versions of OkHttp, WebView, or HttpEngine<\/p>\n Rolling a change like this out to billions of devices means testing it first. Jigsaw ran two checks. In the first, GREASE requests went out to the top 10,000 domains worldwide, and connection success held steady compared to ordinary TLS<\/p>\n In the second, the team ran requests through<\/a> 202 countries and 740 ISPs, including heavily filtered networks like Russia and China, and found interference stayed near zero everywhere<\/p>\n \u201cInternet security must evolve continuously to match modern threats. Jigsaw\u2019s ECH measurements helped validate deployment in Android 17, addressing a long-standing vulnerability and advancing our shared goal of a more private web,\u201d noted David Kleidermacher, VP of Engineering, Android Security & Privacy<\/p>\n Beyond ECH, Google rolled out three more changes that work toward the same goal<\/p>\n Local Network Protection makes apps ask before they can scan or connect to other devices on your home network, closing off a way apps used to profile your household through your smart TV, cameras, and consoles<\/p>\n Certificate Transparency is on by default, forcing certificates into a public log so forged ones are harder to slip through unnoticed<\/p>\n And participating mobile operators can now switch off 2G for their subscribers with no action needed on the user\u2019s end, cutting down exposure to SMS blasters, the fake base stations that force phones onto old, insecure networks to push phishing texts past spam filters<\/p>\n \u201cYour privacy and security should never be a compromise as technology evolves. These new Android 17 protections work seamlessly behind the scenes so you can connect, browse, and communicate with peace of mind,\u201d Google concluded<\/p>\n More about<\/p>\n \n Related:<\/strong> \n Join Justfine Infotech<\/strong> and build real digital skills in AI, automation, web development, digital marketing, office productivity, e-commerce, freelancing<\/a> and cybersecurity.<\/p>\n Available Programmes:<\/strong> WhatsApp:<\/strong>Android 17\u2019s new security features target tracking, fake certificates and SMS blasters<\/h3>\n
![\"Android](\"https:\/\/justfineinfotech.com\/wp-content\/uploads\/2026\/08\/Android_network_security_features_1.webp\")
<\/p>\n
\n
\n Digital Automation Training Benin: 5 Winning Skills Employers Demand in 2026
\n <\/a>\n <\/p>\n
\n WhatsApp Marketing Automation Africa: 6 Dangerous Mistakes Brands Make in Nigeria
\n <\/a>\n <\/p>\n<\/div>\nWant to learn this practically?<\/h3>\n
\n 6 Weeks Certificate \u2022 3 Months Professional Certificate \u2022 6 Months Diploma \u2022 Full Professional Diploma<\/p>\n
\n +229 01 57 57 99 15
\n +229 01 66 68 11 60<\/p>\n