TLS privacy and Encrypted Client Hello

Android 17 encrypts the field enterprise web filters read

Google's ECH support hides the destination domain from anything watching the TLS handshake, but only when the app's networking library and the site's CDN both cooperate, so the breakage arrives unevenly.