CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Android 17 Beta Introduces Secure-by-Default Architecture and Enhanced Security Features

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Android 17 Beta introduces a secure-by-default architecture with major security updates, including the deprecation of the android:usesCleartextTraffic attribute and the addition of HPKE hybrid cryptography support. The update also brings performance improvements and changes for large-screen devices, marking a shift towards tighter default security settings and a new continuous Canary channel for developers. The beta version aims to strengthen app protections and improve developer workflows, with platform stability targeted for March. Developers are urged to migrate to network security configuration files for more granular control over app security.

Timeline

  1. 17.02.2026 18:00 1 articles · 7h ago

    Android 17 Beta Introduces Secure-by-Default Architecture and Enhanced Security Features

    Android 17 Beta introduces a secure-by-default architecture with major security updates, including the deprecation of the android:usesCleartextTraffic attribute and the addition of HPKE hybrid cryptography support. The update also brings performance improvements and changes for large-screen devices, marking a shift towards tighter default security settings and a new continuous Canary channel for developers. The beta version aims to strengthen app protections and improve developer workflows, with platform stability targeted for March. Developers are urged to migrate to network security configuration files for more granular control over app security.

    Show sources
    Open in new tab

Information Snippets

  • Android 17 Beta deprecates the android:usesCleartextTraffic attribute, blocking cleartext traffic by default for apps targeting API level 37.

    First reported: 17.02.2026 18:00
    1 source, 1 article
    Show sources

  • HPKE hybrid cryptography support is added via a new public Service Provider Interface (SPI) for secure communication.

    First reported: 17.02.2026 18:00
    1 source, 1 article
    Show sources

  • Certificate transparency is enabled by default, and new install-time permissions improve localhost interaction protections.

    First reported: 17.02.2026 18:00
    1 source, 1 article
    Show sources

  • Apps targeting Android 17 must adapt to new requirements for large-screen devices, phasing out orientation and resizability restrictions.

    First reported: 17.02.2026 18:00
    1 source, 1 article
    Show sources

  • A lock-free MessageQueue implementation and generational garbage collection in ART are introduced to reduce CPU overhead and improve frame consistency.

    First reported: 17.02.2026 18:00
    1 source, 1 article
    Show sources

  • Platform stability is targeted for March, with the final SDK and NDK APIs to be delivered then.

    First reported: 17.02.2026 18:00
    1 source, 1 article
    Show sources

  • Android 17 will receive quarterly updates, with planned app-breaking changes in Q2 and a minor SDK release in Q4.

    First reported: 17.02.2026 18:00
    1 source, 1 article
    Show sources

  • The new Canary channel provides faster feature access, OTA updates, and improved integration with continuous integration workflows.

    First reported: 17.02.2026 18:00
    1 source, 1 article
    Show sources