Encrypted Client Hello (ECH) is now supported on Vercel CDN
By Steven Van ·
Vercel CDN now supports Encrypted Client Hello (ECH) for domains managed by Vercel DNS.
Vercel CDN now encrypts the Server Name Indication (SNI) field in the TLS handshake for domains managed by Vercel DNS, using Encrypted Client Hello (ECH). SNI was previously the part of an HTTPS connection that revealed which hostname a client was connecting to; with ECH, network observers instead see a connection to Vercel's shared ECH hostname, vercel-ech.com.
ECH is managed at the platform level and turns on automatically where it's supported, starting in the US for a limited number of TLDs and expanding to more TLDs and regions over time. It works in recent versions of Chrome, Edge, and Firefox.
Vercel
The platform for frontend developers — deploy, preview, and scale web apps and AI agents with zero config.
View Vercel →