Android 17 adds platform support for encrypted client hello

Google is adding Encrypted Client Hello support to Android 17, extending privacy protection for the hostname disclosed at the start of many TLS connections. For supported websites and apps, ECH works with private DNS to obscure visited domain names from network providers and other observers. It will be enabled by default for apps targeting Android 17 when they use compatible networking libraries. Google also said Android 17 will require local-network permission for certain app activity, enable Certificate Transparency by default, and let participating mobile operators automatically disable 2G.