Encrypted Client Hello (ECH) is now supported on Vercel CDN
12 days agoOriginal notes
Vercel CDN now supports Encrypted Client Hello (ECH) for domains managed by Vercel DNS. ECH encrypts the Server Name Indication (SNI) in the TLS handshake, the last part of an HTTPS connection that revealed which hostname a client was connecting to. With ECH, network observers see a connection to Vercel's shared ECH hostname, vercel-ech.com.
ECH is managed at the platform level and automatically enabled selectively where supported, starting in the US for a limited number of TLDs, and expanding to more TLDs and regions over time.
Recent versions of Chrome, Edge, and Firefox support Encrypted Client Hello.
Learn more about ECH and how Vercel CDN protects your application in the CDN encryption documentation.