Google has added platform-wide support for Encrypted Client Hello, making Android 17 the first major operating system to use the technology to hide specific web and app destinations from ISPs and other network observers.
This puts Android ahead of Apple’s iOS in this particular area of network privacy, despite Apple’s strong focus on user privacy. Here is what you should know.
What is ECH and the problem it solves
When you visit a website through a browser or app, the target website can traditionally be revealed through the Server Name Indication (SNI) field during the connection process.
This allows ISPs such as Airtel and MTN, Wi-Fi hotspot operators, or other network observers to see which service a device is connecting to. That information can potentially be used to monitor browsing patterns or build user profiles.
ECH (Encrypted Client Hello) helps close this privacy gap by encrypting the part of the connection that contains the specific website name. This means ISPs, Wi-Fi operators and other network observers have a much harder time determining which specific website a user is visiting.
However, ECH does not make internet activity completely invisible. Information such as the CDN or broader service being accessed, along with the amount and timing of traffic, can still be visible to network operators.
What this means for ISPs and users
For Internet Service Providers (ISPs), the rollout of Encrypted Client Hello (ECH) on Android 17 is a significant change because it reduces the amount of information they can obtain about the specific websites users connect to.
ISPs are the companies we pay to access the internet, including popular networks such as MTN, Glo and Airtel.
Because MTN acts as a network provider carrying your internet traffic, it can traditionally observe connection information, including the domains devices attempt to reach. Android 17’s ECH support makes it more difficult for ISPs to identify specific websites from this part of the connection.
This could reduce the usefulness of browsing information for some forms of network monitoring, analytics and profiling. However, it does not prevent ISPs from seeing all internet activity or from collecting other information available at the network level.
ISP monitoring can sometimes serve legitimate purposes, including network management and security. But ECH protection also matters when users connect to public Wi-Fi networks, where network operators and other parties on the network may otherwise be able to observe connection information.
By encrypting the website name during the connection setup, ECH makes it harder for these observers to identify the specific destination a user is connecting to. It can therefore improve privacy and make certain forms of targeted network-based interference more difficult.
Android 17’s ECH support is a significant step for user privacy, but it also changes how much information ISPs can obtain from users’ connections. ECH has been the subject of debate among network operators because it limits their visibility into specific destinations and can affect some network management and monitoring practices.
Some countries have also taken steps to restrict or block ECH. Russia, for example, has moved against ECH to maintain visibility into internet traffic.
For Android users, however, the addition of ECH means greater protection for one important part of their internet connections. It does not make browsing completely anonymous, but it makes it harder for ISPs, Wi-Fi operators and other network observers to see the specific websites a device is connecting to.
For now, Android 17 has an advantage over iOS in this particular area of network privacy.
