TLS and Encrypted Client Hello

Android 17 encrypts the handshake field enterprise filters still read

Google's Encrypted Client Hello rollout, wrapped in GREASE decoys so protected sessions look like everything else, removes the plaintext domain that SNI-based logging keys on. Jigsaw reports near-zero interference even in Russia and China.