ECH
A TLS 1.3 extension mechanism that encrypts the SNI field in the ClientHello to prevent intermediaries from observing the domain names a user visits; its configuration (ECHConfig) can be delivered via DNS HTTPS records or TLS extensions.
Timeline (last 90 days)
The SVCB resolution endpoint complements the existing TLS-layer ECH probing endpoint: the latter reads ECHConfig from the TLS extension, while the new endpoint resolves SVCB records from the DNS layer.
ECH is a TLS 1.3 extension used to encrypt fields such as SNI in the ClientHello, and its configuration can be distributed base64-encoded via the DNS HTTPS record or the ech field in Alt-Svc parameters.
All Facts (2)
The SVCB resolution endpoint complements the existing TLS-layer ECH probing endpoint: the latter reads ECHConfig from the TLS extension, while the new endpoint resolves SVCB records from the DNS layer.
50%UnverifiedECH is a TLS 1.3 extension used to encrypt fields such as SNI in the ClientHello, and its configuration can be distributed base64-encoded via the DNS HTTPS record or the ech field in Alt-Svc parameters.
50%