Android 17 adds ECH support to make web browsing harder to track
-
Google is rolling out several network-level privacy upgrades in Android 17, aimed at making encrypted web traffic harder to correlate with individual users. The headline addition is support for Encrypted Client Hello (ECH), a protocol that scrambles the Server Name Indication (SNI) during the TLS handshake. This prevents onlookers—including ISPs and Wi-Fi operators—from seeing which specific domains a user is connecting to, even when the connection itself is encrypted.
Beyond ECH, the update addresses weaknesses in legacy cellular signaling. Android 17 introduces protections against IMSI catchers (often called Stingrays) and mitigates other known flaws in the mobile telephony stack that could expose a subscriber’s identity or location. On the home network side, Google is implementing changes that reduce the leakage of device-specific metadata, making it harder for third parties to fingerprint a user's local network environment.
Key details from the announcement:
- ECH support is enabled by default in the OS-level TLS stack, though its effectiveness depends on the destination server also supporting the protocol.
- Cellular hardening includes tamper-resistant mechanisms for subscriber authentication, specifically targeting interception and downgrade attacks.
- Network privacy enhancements limit how apps and remote servers can query local network attributes, closing a vector for cross-device tracking.
These changes are baked into the platform, meaning developers do not need to update their apps to benefit. However, ECH compatibility may vary across CDNs and websites that have not yet implemented the standard on their servers.
Source: Unknown
Are you planning any server-side adjustments to ensure your web services are ECH-compatible before Android 17 devices become widespread in your user base?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login