GoKawiilAndroid 17 adds ECH support to hide website domains from ISPs
Google's next Android release will support Encrypted Client Hello, a TLS extension that encrypts the hostname portion of the connection handshake so it can no longer be read in plain text. Paired with private DNS, this stops internet providers and Wi-Fi operators from easily seeing which sites or apps a device is contacting. The feature will be on by default for apps targeting Android 17 that use updated networking libraries like OkHttp, WebView, or HttpEngine.
GoKawiil's interpretation of the reporting above, not reported fact.
Server Name Indication has long let ISPs and network snoopers profile users by logging visited domains even over encrypted HTTPS connections. Building ECH into the OS itself, rather than relying on individual browsers, extends this privacy protection to all compatible apps system-wide, not just web browsing. Google's fallback mechanism, ECH GREASE, also prevents real encrypted connections from being singled out on networks that don't yet support the standard.
- Android 17 natively supports Encrypted Client Hello (ECH) to hide destination hostnames from network observers.
- ECH works with private DNS and is enabled by default for apps using compatible libraries like OkHttp and WebView.
- Fake ECH GREASE traffic prevents real encrypted connections from being flagged on non-supporting servers.
Google Pixel 9 — Pixel phones are first in line for new Android releases, so a Pixel 9 is the surest way to get platform-level privacy features like Encrypted Client Hello as soon as Android 17 ships. It also gets Google's security updates directly, without waiting on carrier or OEM rollouts.
See Google Pixel 9 on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-08-27
Published there as: “Android 17 adds ECH support to make web browsing harder to track”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.