Live Feeds
● TRACKER Updated 14d ago · 11 sources tracked

Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers

Android 17 update includes Encrypted Client Hello (ECH) to hide domain names and website visits from network providers and ISPs. The update also adds security controls to block fake base stations and rogue 2G cell sites used in SMS blaster phishing campaigns. Additionally, carriers can disable 2G entirely and measures restrict unauthorized discovery on home Wi-Fi networks. These changes aim to strengthen user privacy and security.

🎙️

Listen to Live Briefing

Real-time synthesized voice briefing · Live Feeds Desk

⏱ ~3 min
Speed:
RSS Source map (11)
⚡ Key Developments & Real-Time Context
Text size:
  • ✓ Android 17 adds broad support for Encrypted Client Hello (ECH) to hide domain names and website visits from network providers and ISPs.
  • ✓ Android 17 includes security controls to block fake base stations and rogue 2G cell sites used in SMS blaster phishing campaigns.
  • ✓ Carriers can disable 2G entirely with the Android 17 update.
  • ✓ Android 17 introduces measures to restrict unauthorized discovery on home Wi-Fi networks.
🛡️ Source Corroboration: 11 independent reporting domains (85% confidence) ⏱ Read time: ~2 min

What changed

The latest development is the addition of OS-wide Encrypted Client Hello (ECH) support in Android 17, enhancing user privacy by hiding website visits from network providers.

Live updates

  1. Android 17 adds OS-wide ECH to hide website visits from network providers

    Android 17 update includes Encrypted Client Hello (ECH) to hide domain names and website visits from network providers and ISPs. The update also adds security controls to block fake base stations and rogue 2G cell sites used in SMS blaster phishing campaigns. Additionally, carriers can disable 2G entirely and measures restrict unauthorized discovery on home Wi-Fi networks. These changes aim to strengthen user privacy and security.

    Why it matters

    The deployment of ECH in Android 17 addresses a significant privacy gap that existed despite the use of HTTPS and encrypted apps. This update is crucial for protecting users from network snooping and enhancing their overall online security. The changes come as part of Google's efforts to bolster Android's security features.

    What is confirmed

    • Android 17 adds broad support for Encrypted Client Hello (ECH) to hide domain names and website visits from network providers and ISPs.
    • Android 17 includes security controls to block fake base stations and rogue 2G cell sites used in SMS blaster phishing campaigns.
    • Carriers can disable 2G entirely with the Android 17 update.
    • Android 17 introduces measures to restrict unauthorized discovery on home Wi-Fi networks.
    • Encrypted Client Hello (ECH) is a new internet standard designed to close a privacy gap that allowed ISPs to see the names of every website visited.

    Still unconfirmed

    • Your real IP address is still exposed, and for that, you still need a VPN.

    What to watch next

    • Further updates on the rollout and adoption of Android 17
    • Analysis of the effectiveness of ECH in enhancing user privacy
    • Development of complementary security features in future Android updates
    Sources used for this update (4)
    1. www.zdnet.com — How Android 17 stops network snoops and SMS blasters now - with ECH and a 2G kill switch
    2. cybersecuritynews.com — Android 17 Adds New Protection for Wi-Fi Tracking to Keep Your Device Secure
    3. arstechnica.com — New Android Drop adds remembered items in Find Hub, makes anti-nausea dots official
    4. gizmodo.com — Google is finally hiding your browsing history from your ISP, but you still need a VPN
    confidence 85%

  2. Android 17 Introduces OS-Wide Encrypted Client Hello and Network Security Updates

    Google is deploying Encrypted Client Hello (ECH) in Android 17 to hide domain names and website visits from network providers and ISPs. This update addresses privacy gaps that persist despite the use of HTTPS and encrypted apps. Beyond ECH, Android 17 includes security controls to block fake base stations and rogue 2G cell sites used in SMS blaster phishing campaigns. The update also enables carriers to disable 2G entirely and introduces measures to restrict unauthorized discovery on home Wi-Fi networks while strengthening certificate validation.

    Why it matters

    Network providers can traditionally see the domain names users visit even during encrypted sessions. These updates target legacy vulnerabilities in 2G infrastructure and DNS visibility that bypass modern 5G security.

    What is confirmed

    • Android 17 supports Encrypted Client Hello (ECH) to hide website visits from network providers.
    • Google is adding security features to Android 17 to block fake base stations.
    • Android 17 allows carriers to disable 2G connectivity.
    • New network security controls aim to blunt phishing campaigns delivered through rogue 2G cell sites.

    What to watch next

    • Confirmation of the specific rollout date for Android 17
    • Data on the percentage of carriers disabling 2G via the new controls
    Sources used for this update (7)
    1. The Hacker News — Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers
    2. blog.google — 4 new ways Android is protecting your network connections
    3. Engadget — Google Deploys Support For Encrypted Client Hello On Android 17
    4. 9to5Google — Android 17 boosts network security by hiding domain names, lets carriers disable 2G
    5. finance.biggo.com — Google Adds Fake Base Station Blocking Security Features to Android 17
    6. MakeUseOf — A new browser feature hides which website you're visiting from your ISP, and it has nothing to do with a VPN
    7. cyberpress.org — Android 17 Adds New Network Security Protections to Block 2G SMS Blaster Attacks
    confidence 100%
📊

Community Sentiment: How do you assess this situation?

Voice your perspective · Real-time aggregated sentiment from the Live Feeds community