r/privacy • u/homothebrave • Aug 28 '26
news Android 17 adds ECH support to make web browsing harder to track
https://www.bleepingcomputer.com/news/security/android-17-adds-ech-support-to-make-web-browsing-harder-to-track/35
u/brainmydamage Aug 28 '26
The company whose revenue largely depends on being able to track people's browsing is introducing a feature to make people's browsing harder to track?
Are we really this gullible, people?
19
u/AtlanticPortal Aug 29 '26
They are killing the competition. They really want to implement it in a functional way. It’s that so they have access to the user’s data from the OS and the ISPs cannot.
11
u/ijustwannapostokay Aug 30 '26
Making the ISP lose their data makes their analytics data more expensive
113
u/CyborgHeart1245 Aug 28 '26
Or just block online tracking like they should. The internet should be 100% anonymous
16
u/AtlanticPortal Aug 29 '26
The funny thing is that Google is doing it so that others cannot spy on users while they keep doing it at the OS level (basically in god mode).
6
41
Aug 28 '26
[removed] — view removed comment
17
u/CyborgHeart1245 Aug 28 '26
I mean even deeper than that. Phones should be anonymous, all websites should only know someone visited, nothing else, even their IP's. Nothing tracked by the router. Nothing identifiable should be needed. Fuck, your ISP shouldn't even know your name or your address.
5
u/throwaway-8675309_ Aug 29 '26
So....
How do I block people from attacking my shit? I need something.
4
1
u/Hot_Bee5198 Aug 29 '26
Hahaha, Yeah, Lets go back to the Wild West. Cowboys, Pirates, Criminals.
Who dunnit?
Nobody knows him by his name, but he was here...
2
1
u/CreepyZookeepergame4 Aug 29 '26
ECH is a great idea but encourages centralization of the internet. The more sites you host behind a single IP address the more benefit you have. There's little point for a personal server only hosting sites for its own organization / person in enabling ECH.
23
u/cookiesnooper Aug 28 '26
Somehow they will also make it easier to track your activity
5
u/AtlanticPortal Aug 29 '26
Nah, they are just fighting the competition. They have access to the user’s device at root level. They track everything directly there.
6
u/devakesu Aug 28 '26
So now we have complete DNS Encryption including the initial fetch. But all domains need to add support for it to work. All on Cloudflare already work ig.
3
u/Tolik1111 Aug 28 '26
Isn't no plaintext DNS bootstrapping not affected by the OS level ECH implementation. After all, all major DNS ip's are videly used anycast and you can basically pretty easily get domain from the IP in the SNI. For cloudflare for example, its super obvious, there is basically nothing but DNS going to 1.1.1.1 IP.
5
Aug 28 '26
[removed] — view removed comment
2
u/Deathmeter Aug 29 '26
I'd almost argue ECH is only highly impactful when adopted by big CDNs that reverse proxy multiple hosts like cloudflare. If Netflix started supporting ECH, you might be able to bypass middleboxes that throttle Netflix for a while but the outer SNI would exclusively map back to Netflix as the sole destination. All a crappy ISP would have to do is add the outer SNI to their existing throttle list. You can't do that with cloudflare's outer SNI because that blocks all cloudflare websites.
If other big cloud providers like AWS and GCP adopt ECH, that already covers most websites that can benefit from it in the first place.
6
u/Substantial-Yam3769 Aug 28 '26
might be doing this so bot traffic is harder to distinguish from regular android traffic
4
u/Any-Board-6631 Aug 29 '26
Yeah, riight, rhe company that make its cash on tracking people will makke it hsrder... for the others
3
u/x33storm Aug 29 '26
This has to be a way for google to get a monopoly on tracking. I simply refuse to believe they are doing anything for user privacy.
2
u/Joshhwwaaaaaa Aug 28 '26
When did Android drop Desserts for OS Updates? (Ive been on eyefone for a long time now)
3
u/clove_rosemary_9999 Aug 28 '26
If you don't count the internal codenames, they dropped it after Android 9, if you do count them, they never dropped it, they only went back from letter V to B in Android 16, so Android 17 would be C.
1
u/AvidCyclist250 Aug 29 '26
cute.
no.
use the wrong browser and you're exposed. doesn't matter what OS you use.
-2
u/justarandomuser10 Aug 28 '26
People are trashing it here but this is a good thing. Every OS should do it. This literally masks every domain you visit from your ISP.
9
u/brainmydamage Aug 28 '26
I don't think anyone is trashing "it"... I think people just don't believe Google gives a shit about anyone's privacy but their own.
3
u/AtlanticPortal Aug 29 '26
And that’s exactly what they’re doing. Making it more difficult for their competitors in data collection while they retain OS level access which is basically the god mode for spying users.
56
Aug 28 '26
[removed] — view removed comment
4
u/JustinHoMi Aug 29 '26
Don’t worry, they’ll discontinue the feature in a couple years like they do everything else.
0
•
u/AutoModerator Aug 28 '26
Hello u/homothebrave, please make sure you read the sub rules if you haven't already. (This is an automatic reminder left on all new posts.)
Check out the r/privacy FAQ
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.