Android 17 Bolsters Privacy with Encrypted Client Hello and Network Protections
Android 17 introduces significant network security enhancements, including default support for Encrypted Client Hello (ECH), to shield users from Wi-Fi tracking and web snooping.
Google is rolling out a suite of network security upgrades with Android 17, designed to make it substantially more difficult for network operators, eavesdroppers, and malicious actors to track user activity on mobile devices.
"When you visit a website or use an app, even if the connection is encrypted by HTTPS, the domain names of the sites you visit are still visible to network operators and eavesdroppers," explained Google software engineer Bram Bonné and product manager Shuaibo Huang. "This unencrypted data can be used to build user profiles or, in the hands of malicious actors, leveraged for targeted phishing and scam campaigns."
Android 17 addresses this privacy gap by integrating support for Encrypted Client Hello (ECH), a privacy-enhancing standard that works in tandem with private DNS to conceal visited domain names from external observers. ECH achieves this by encrypting the domain name using a key that only the destination server can decrypt. To further obscure protected connections from passive observation, apps and browsers will also send GREASE (Generate Random Extension And Signature)، a decoy version of the encrypted extension, preventing observers from inferring connection security based on traffic patterns.
Google highlights that Android is the first major mobile operating system to implement broad ECH support. The company is actively collaborating with its Jigsaw division, focused on internet safety, and various app developers to accelerate the adoption of this new standard. Nick Sullivan, co-author of the ECH standard, lauded the move as "a huge step towards closing one of the largest remaining structural privacy holes left on the Internet."
For applications developed to target Android 17, ECH will be enabled by default, provided the app utilizes a compatible networking library such as recent versions of OkHttp, WebView, or HttpEngine. Google conducted extensive testing to ensure the stability and compatibility of ECH across diverse network conditions. Initial tests involving GREASE requests to the top 10,000 global domains showed no degradation in connection success rates compared to standard TLS connections. Further testing across 202 countries and 740 ISPs, including heavily monitored networks in Russia and China, revealed minimal interference.
Beyond ECH, Android 17 incorporates three additional security features aimed at enhancing user privacy. Local Network Protection requires apps to seek user permission before scanning or connecting to devices on a local network, preventing apps from profiling household devices. Certificate Transparency is now enabled by default, logging issued certificates publicly to make forged certificates more detectable. Additionally, participating mobile operators can disable 2G networks for their subscribers, mitigating risks associated with SMS blasters and fake base stations that exploit older, insecure network protocols for phishing attacks.
These layered security improvements in Android 17 underscore Google's commitment to evolving mobile privacy in response to emerging threats. By encrypting domain lookups and introducing granular controls over network access, the operating system aims to provide users with greater peace of mind as they navigate the digital landscape.
"Your privacy and security should never be a compromise as technology evolves," Google stated. "These new Android 17 protections work seamlessly behind the scenes so you can connect, browse, and communicate with peace of mind."