Android 17 introduces powerful new protections to secure your connections, defend against cellular vulnerabilities and keep your home network private.
11 Likes
From TFA
In partnership with Jigsaw, we are working with industry leaders, service providers, and app developers to accelerate ECH adoption. Learn more about Jigsaw’s research on ECH in their blog. With this launch, Android 17 sets a landmark precedent as the first major mobile OS to enable broad ECH support.
Jigsaw also built Private DNS in to Android (if you go through the commits, it wasn’t simple nor straight forward), btw. One among the engineers who worked on Private DNS (Benjamin Schwartz) also co-developed the SVCB/HTTPS DNS record standard at the IETF, a key basis for TLS 1.3 Encrypted Client Hello. The Jigsaw team also built anti-censorship tools like Intra & Outline (but their most impactful work is yet to come, if you ask me, in some of the upcoming projects which should go live in subsequent Android versions).
(disclaimer: I occasionally contribute improvements to Jigsaw’s open source tools)
16 Likes
Seems Google’s partnership with Jigsaw is a step in the right direction.
I’m wondering how this will benefit GOS and tools like Rethink in the future.
You probably already know this, but it is unclear from your post: Jigsaw is is a Google-owned organisation.
No, you don’t say…
Rethink (client side) implemented ECH in Aug 2024.
The server side (resolver, download server, website etc) got ECH for free as those are all fronted on Cloudflare, who had implemented ECH and/or ESNI way back in 2021 (iirc), and we had enabled it for rethinkdns.com and bravedns.com, even when it was experimental.
Yes, but I don’t think they take all directions from the mothership, and have their own CEO. Jigsaw was previously known as “Google Ideas” (mirror) with headquarters in NYC.
2 Likes
In light of this article, what is the support for ECH like in Windows, Linux, macOS, GrapheneOS, and iOS?
I know the article is from Google, but I’m getting the impression that Android is now the most secure OS in the world.
I am wondering why it’s seemingly absent everywhere on iOS. With Private Relay, you have ODNS covering all traffic outside of safari/mail, would pair well with ECH, even if it’s not too widespread apart from Cloudflare yet
IOS still not let users disable 2G to protect again SMS Blaster and ISMI catchers( downgrade attack mode), I wonder if they will do an an update soon.
Doesn’t Lockdown disable 2G?
2 Likes
Yes it does.
1 Like
yes, but it is not a simple solution as in Android.
Lockdown mode is not for corporate users, and normal users. While disabling 2G on Android is trivial and with Android 17 it will be possible for carriers to disable it by default.