AI Generated Image
Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers
The Hacker News • • technology
Key Points:
- Google announced new network security features in Android 17, including support for Encrypted Client Hello (ECH) to enhance connection privacy by encrypting website domain names and preventing network eavesdropping.
- ECH GREASE will be enabled by default in Android 17, sending fake ECH extensions to non-supporting sites to avoid revealing which connections are protected, expanding ECH protection from browsers to the entire OS.
- The OkHttp library now supports ECH, enabling third-party Android app developers to implement this privacy feature in their applications.
- Android 17 introduces Local Network Protection, requiring apps to request user permission before scanning or connecting to devices on the local network, enhancing user control over network access.
- Additional security improvements include enabling Certificate Transparency by default and allowing telecom operators to disable 2G networks by default to prevent downgrade attacks and reduce exposure to malicious base stations.
