Connection privacy is the practice of limiting what network intermediaries can learn from a session. Intermediaries include ISPs, Wi-Fi operators, proxies, and other systems that sit between a device and a service. The goal is to reduce exposed metadata such as the destination, timing, and patterns of a connection, even when the payload is encrypted.
This matters because attackers and surveillance systems often rely on passive observation rather than breaking encryption. By studying connection setup, they can infer which sites are visited, when users are active, or which services are being used. Defenses such as TLS improvements and Encrypted Client Hello (ECH) try to hide more of that handshake data, making traffic analysis less useful. Connection privacy does not stop malware, phishing, or account compromise, but it can remove a quiet source of tracking and profiling.