[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fy2ZlOgxyZFdT3V1BUp2VQy7Q3Q2tZyg2_pD1hXCVABE":3},{"article":4,"iocs":40,"watch_terms":41,"solutions":42,"lesson":76},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"8281f076-909c-40e6-b6cb-cf6eb936be6c","Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers","android-17-adds-os-wide-ech-to-hide-website-visits-from-network-providers-45f31e","Google on Thursday announced new network security protections in Android 17 to bolster connection privacy, address cellular vulnerabilities, and safeguard the privacy of users' home networks. Topping the list is support for Encrypted Client Hello (ECH), a privacy standard that prevents networks from eavesdropping on which websites a user is visiting. \"This new privacy standard works in tandem","Google's Android 17 update introduces Encrypted Client Hello (ECH) as an operating system-wide feature to prevent network providers from seeing which websites users visit. This privacy standard works with private DNS to obscure domain names, enhancing user privacy. The update also includes Local Network Protection, mandatory Certificate Transparency, and the ability for telecom operators to disable 2G by default to mitigate risks from SMS blasters and rogue base stations.","Android 17 adds OS-wide Encrypted Client Hello (ECH) to hide website visits from network providers.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Fandroid-17-adds-os-wide-ech-to-hide.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEiHdeGqGafTZXNtGvV_-qR7K3QId_-DpEfOzetKbhVQvNdNyTMAy-6gLXVFlkMHsGDN2wKK8v1ZMeOKe9_3XVYAY5TVkqH2heesi0c_QmJzLpDX1M-XfOtI_W4Qe8OM8Yhin40QWvN0XHvU9cqDlZH3eeZY_18euIxiBdcbhWMVnXct-x84k2gvchQYSiuN\u002Fs1600\u002F1000103901.jpg","2026-08-28T16:20:46+00:00","2026-08-28T20:00:15.955554+00:00",7,[17,20,23,26,28,30],{"name":18,"type":19},"Android 17","product",{"name":21,"type":22},"Encrypted Client Hello","technology",{"name":24,"type":25},"Google","vendor",{"name":27,"type":19},"Google Chrome",{"name":29,"type":19},"Mozilla Firefox",{"name":31,"type":19},"OkHttp","614132b8-5837-4952-b8b5-c6c9a32a1d85",{"id":32,"icon":34,"name":35,"slug":36},null,"Privacy","privacy",[38],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},[],[24,18,27],{"controls":43,"vendors":70},[44],{"slug":45,"name":46,"problem":47,"products":48},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[49,57,62],{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":54,"url":55,"description":56},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":58,"product_name":59,"url":60,"description":61},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",[71],{"slug":72,"name":24,"logo_path":73,"roles":74},"google","\u002Fvendor-logos\u002Fgoogle.png",[75],"reported_by",{"slug":77,"title":78,"body":79,"framework_refs":80,"framework_notes":93},"android-17-brings-os-wide-encryption-to-shield-dns-queries-from-network-providers","Android 17 Brings OS-Wide Encryption to Shield DNS Queries from Network Providers","Android 17's introduction of Encrypted Client Hello (ECH) addresses a longstanding privacy gap where network providers and ISPs could observe users' browsing destinations through unencrypted TLS handshakes, even when HTTPS was in use. Without ECH, the Server Name Indication (SNI) field in TLS connections exposed domain names in plaintext, enabling traffic analysis, surveillance, or censorship by network intermediaries. This OS-level integration matters because it removes the burden from individual users to configure privacy tools, making strong transport-layer privacy the default. The accompanying features — Local Network Protection, mandatory Certificate Transparency, and 2G disablement — collectively reduce attack surfaces from rogue infrastructure and fraudulent certificates. The lesson is clear: default-secure configurations at the platform level dramatically improve privacy outcomes across entire user populations.",[81,82,83,84,85,86,87,88,89,90,91,92],"NIST SP 800-188 (De-Identifying Government Datasets)","NIST SP 800-187 (LTE Network Security)","NIST Privacy Framework PR.DS-2 (Data-in-transit protection)","CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","GDPR Article 25: Data Protection by Design and by Default","GDPR Article 32: Security of Processing","NIST AC-17: Remote Access","NIST SC-8: Transmission Confidentiality and Integrity","NIST SC-23: Session Authenticity","RFC 8744 \u002F ECH IETF Draft: Encrypted Client Hello Standard",{}]