Skip to content
Tech News
clear
Topics: Today This Week This Month This Year

Android 17 adds Encrypted Client Hello and anti-stingray SMS defenses

Google detailed further network security changes coming with Android 17, including support for the Encrypted Client Hello protocol that encrypts DNS server lookups, a feature letting carriers automatically block low-security 2G connections used in SMS Blaster spam attacks, and restrictions preventing apps from scanning home networks for vulnerable devices. The update also builds on previously announced Certificate Transparency enforcement to ensure phones connect using legitimate SSL certificates.

Android 17 adds system-wide Encrypted Client Hello support

Google has built Encrypted Client Hello (ECH) directly into Android 17, making it the first major mobile operating system to support the standard at the platform level and turning it on by default. ECH hides the specific website or domain a device is connecting to, so internet providers can only see the content delivery network being used, not the actual destination. Alphabet's Jigsaw division, which developed the feature, says it addresses a long-standing gap in HTTPS privacy protections.

Android 17 adds ECH support to hide website domains from ISPs

Google's next Android release will support Encrypted Client Hello, a TLS extension that encrypts the hostname portion of the connection handshake so it can no longer be read in plain text. Paired with private DNS, this stops internet providers and Wi-Fi operators from easily seeing which sites or apps a device is contacting. The feature will be on by default for apps targeting Android 17 that use updated networking libraries like OkHttp, WebView, or HttpEngine.

Guide shows how to self-host OpenBSD on a $4/month DigitalOcean droplet

A developer detailed a step-by-step process for running a personal website on OpenBSD hosted on DigitalOcean, using the platform's custom image upload feature to install OpenBSD's miniroot image and configuring the server with httpd and Let's Encrypt for HTTPS. The setup costs about $4.24 per month after tax, positioned as an alternative to free static hosting services like GitHub Pages or Cloudflare Pages.

Today's top topics: openai apple anthropic qualcomm claude opus 5.5 artificial intelligence iphone 18 pro ai safety motorola signature 27 sam altman
View all today's topics →