megachangelog
Feature

Encrypted Client Hello (ECH) now supported on Vercel CDN

Vercel CDN now supports Encrypted Client Hello (ECH) for Vercel DNS-managed domains, encrypting the Server Name Indication in TLS handshakes to prevent network observers from seeing which hostname a client is connecting to. ECH is enabled automatically at the platform level for supported browsers.

Vercel CDN now supports Encrypted Client Hello (ECH) for domains managed by Vercel DNS. ECH encrypts the Server Name Indication (SNI) in the TLS handshake, the last part of an HTTPS connection that revealed which hostname a client was connecting to. With ECH, network observers see a connection to Vercel's shared ECH hostname, .vercel-ech.com

ECH is managed at the platform level and enables automatically where supported. Recent versions of Chrome, Edge, and Firefox .support Encrypted Client Hello

Learn more about ECH and how Vercel CDN protects your application in the documentation.CDN encryption

Read more

cdnsecuritytlsdnsencryption

Source: original entry ↗