Android 17 introduces new privacy protections designed to limit unauthorized tracking of users on Wi-Fi networks and restrict applications from accessing other devices connected to the same local network.
The key addition is Local Network Protection, which forces apps to request explicit user permission before they can scan for or connect to devices such as TVs, cameras, game consoles, printers and other equipment on the home Wi-Fi network. Previously, such scans could reveal the types of devices present in a household and help build detailed profiles of residents' habits and characteristics.
The restriction reduces this exposure while still allowing common legitimate functions, including casting video to a television.
The platform also adds default support for Encrypted Client Hello (ECH). This technology conceals the requested domain name during the initial phase of HTTPS connections, making it significantly harder for internet service providers, Wi-Fi operators or other third parties to identify which websites and services are being accessed.
Another change is the default activation of Certificate Transparency, a mechanism that requires public logging of digital certificates. The measure helps detect fraudulent or improperly issued certificates that could be used to intercept encrypted traffic.
Android 17 further expands protection against attacks that force smartphones to downgrade to insecure 2G networks. Attackers can deploy rogue base stations to downgrade 4G or 5G connections and deliver fraudulent messages directly to devices.
