Google announced that Android 17 had started defaulting on Encrypted Clinic Hello. This function, which has a primary role in the networking phase, aims to reduce the ability of intermediaries, such as operators, public Wi-Fi operators, to read the target domain name directly by users.

Hide domain names only

During the traditional connection, the name of the site that users visit may be exposed to observers in the network path during the handshake phase. ECH encrypts this part of the site name information, allows the target server to decrypt only, and the other nodes will no longer see a clear domain name.

According to Google, this was the first large-scale deployment of ECH in a mainstream mobile operating system. This feature is based on private DNS, which can hide domain name resolution requests and, when combined, can further reduce network side-visibility.

Validity depends on access to the website

However, this protection does not cover all browsing activities. ECH is only effective for sites and applications that have already been launched. If access to the target site is not completed, the domain name in the request may still be seen by the operator, Wi-Fi provider or other network listener.

  • Site with access to ECH to hide domain names
  • Site without access to ECH still exposes domain names
  • Developer needs to upgrade and enable related support

In its note, Google limits its scope of application to “supported websites and applications” and promotes the upgrade of developers to OkHttp 5.5.0 to expand compatibility.

IP address still visible

Even if ECH is on, the IP address of the target server can be found on the side of the network, along with the approximate data transfer scale. While not necessarily directly readable, observers may make a rougher judgement of user activity based on IP and traffic characteristics.

This means that the ECH hides what domain name it visited and does not hide what a connection has happened. It increases the level of privacy protection, but does not allow browsing to be completely devisible.

Android 17 Synchronize permissions

In addition to ECH, Android 17 defaulted on Certificate Transparency and required application to obtain user permission before scanning local networks. Google ' s update is not just a stand-alone feature on line, but is synchronized to tighten access to connections, certificates and local area networks.