What's happened
Android 17 now supports Encrypted Client Hello (ECH), concealing destination hostnames in TLS handshakes and strengthening privacy. The update, paired with stricter local-network permissions and default Certificate Transparency, marks a step forward in mobile security, though ECH does not hide all metadata and is contingent on developer adoption.
What's behind the headline?
What this means for users
- ECH hides the destination hostname in TLS handshakes, reducing the ability of on-path observers to infer sites visited.
- It requires developers to adopt compatible networking libraries and enable ECH in code paths.
- It is not a VPN and does not conceal DNS requests or all traffic metadata.
- Android 17 balances privacy with interoperability via ECH GREASE when servers don’t support it.
Why this matters
- For everyday users, ECH increases privacy in public and shared networks, but users should pair it with encrypted DNS to maximize protection.
- The feature’s reach depends on widespread server support and library adoption, making it a gradual upgrade rather than an instant shield.
Next steps
- Developers should upgrade to OkHttp 5.5.0+ and enable ECH.
- Users should enable Private DNS to complement ECH protections.
How we got here
Android 17’s rollout brings ECH to mobile for the first time, with Google detailing how it encrypts SNI in the TLS handshake and couples it with Private DNS. The update also blocks certain 2G access points to reduce risk, while nudging developers to upgrade networking libraries to support ECH.
Our analysis
ZDNet, Ars Technica, Android Developers: Google confirms Android 17 supports Encrypted Client Hello (ECH) and Private DNS integration. Ars Technica notes the need for library support and OkHttp upgrade. ZDNet explains ECH limitations and the broader privacy landscape.
Go deeper
- Will ECH become standard across all major apps, and how long will adoption take?
- Should users pair ECH with VPNs or encrypted DNS for maximum privacy?
- What messaging or browser changes are expected as developers adopt ECH?
More on these topics
-
Android - Operating system
Android is a mobile operating system based on a modified version of the Linux kernel and other open source software, designed primarily for touchscreen mobile devices such as smartphones and tablets.