Android 17 adds encrypted hostname handshakes and carrier 2G controls

Google says Android 17 adds support for Encrypted Client Hello, which encrypts the destination hostname in a TLS connection's opening handshake for supported apps and sites. The release also lets participating carriers disable 2G by default, preventing phones from scanning for or connecting to legacy networks that can be used by fake base stations to send phishing texts. Android 17 also enforces local-network permissions and enables Certificate Transparency by default. ECH requires compatible application libraries and server-side configuration.