Android 17 is closing a privacy loophole that has existed since the early days of mobile internet. Even when a connection is secured with HTTPS, the initial handshake between a phone and a website has always broadcast the destination domain as readable text.

blog.ecomtechnology.com/2026/0…