The padlock only covers half the story
When you see the padlock in your browser, HTTPS is scrambling the contents of the page — the messages you send, the passwords you type, the pages you read. That part has been strong for years. But to start a secure connection, your phone first has to announce which website it wants to reach, and for a long time that opening announcement was sent in the clear. So your internet provider, your mobile carrier, or the Wi-Fi network you are on could still see a list of the sites and apps you opened, even without reading what was inside.
Why the leftover clue matters
A list of the places you go online is valuable on its own. It can be used to build a profile of you for advertising, sold to other companies, or — in the wrong hands — used to guess where you bank or which app to imitate in a scam. You do not have to be doing anything unusual for 'which sites does this person use' to feel too personal to hand over.
What Encrypted Client Hello changes
Encrypted Client Hello, or ECH, scrambles that opening announcement too, so the website name is no longer sent in plain view. With it switched on, your provider mostly sees that you are connected to a large delivery network — the shared plumbing that hosts many sites, such as Cloudflare — and how much data moved, but not the exact site or app. Android 17 is the first major phone system to build this in and turn it on by default for apps that use up-to-date networking, and Apple and the main browser makers have been rolling out similar protections.
The honest limits
This is a genuine improvement, but keep it in proportion. ECH only helps when the website you visit also supports it, though many large ones now do. It works best alongside 'private DNS', a related setting that hides the earlier step where your phone looks up a site's address. And it is not a VPN and not anonymity: the website itself still knows it is you, anyone you sign in to still sees your account, and your provider can still tell you are online. Think of ECH as closing one specific leak, not as disappearing from the internet.
Where Sealby fits
Sealby does not route your web traffic — that is the job of your phone, your browser and settings like the ones above. What Sealby protects is the things you keep: your private photos, videos, notes and files, encrypted on your device so that even we cannot read them. The web is quietly getting more private; the files you hold onto deserve the same care.
This is general education, not security advice. Feature names, defaults and availability change between phones, apps, browsers, versions and countries — check the settings on your own device.