### **Android 17** Fortifies Connection Privacy and Combats Cellular Threats **Google** has announced a suite of robust network security protections within **Android 17**, designed to elevate connection privacy, address long-standing cellular vulnerabilities, and safeguard the integrity of users' home networks. ### Encrypted Client Hello (**ECH**) Arrives System-Wide A cornerstone of these new protections is the native, system-wide support for Encrypted Client Hello (**ECH**). This pivotal privacy standard actively prevents network eavesdropping on users' website visits. "This new privacy standard works in tandem with private DNS to obscure the domain names you visit, hiding metadata that can be used to profile you," stated **Google**'s **Bram Bonné** and **Shuaibo Huang**. "By encrypting the destination website name from the very start, **ECH** helps ensure that, for supported websites and apps, network providers and network snoopers can no longer easily see which websites or apps you are accessing." **Google**'s **Jigsaw** division further elaborated that **ECH** encrypts the domain name using a secret key, decipherable only by the destination website. To prevent **ECH**-protected connections from standing out, **Android 17** will enable **ECH GREASE** by default. This mechanism sends fake, randomized **ECH** extensions to sites lacking **ECH** support, ensuring all connection requests appear uniform.  While **ECH** was integrated into **Google Chrome** (version 117) and **Mozilla Firefox** (version 118) previously, its inclusion in **Android 17** extends this crucial protection across the entire operating system. The open-source HTTP client **OkHttp** has also integrated **ECH** support, empowering third-party Android app developers to leverage this new capability. ### Local Network Protection and Certificate Transparency Beyond **ECH**, **Google** has reinforced **Local Network Protection** in **Android 17**. This feature mandates that apps explicitly request user permission before they can scan or connect to other devices on the local network, enhancing control over data sharing within home environments. Another significant privacy and security enhancement is the default enablement of **Certificate Transparency** (**CT**). This mandates that all websites be logged in a public registry, increasing accountability and making it harder for malicious actors to deploy fraudulent certificates. ### Default 2G Disablement to Counter Downgrade Attacks Perhaps one of the most impactful security updates is the ability for telecom operators to disable 2G networks by default for their subscribers. This proactive measure aims to prevent downgrade attacks and mitigate exposure to rogue base stations or SMS blasters that can send malicious text messages or capture traffic from nearby devices.  Previous **Android** versions, specifically **Android 12** and **Android 14**, offered manual options for users and IT administrators to disable 2G. However, **Android 17** introduces a "zero-click solution" for participating carriers. "For participating carriers, this helps eliminate the legacy attack surface out of the box, proactively mitigating a primary method used by SMS blasters before they can target your device," **Google** explained. This move significantly reduces a long-standing vulnerability, offering a more secure mobile experience from the moment users unbox their devices.