ECH
ECH (Encrypted Client Hello, draft) encrypts the entire inner ClientHello (including SNI and ALPN) and is the standardized successor to ESNI.
Purpose
It encrypts the sensitive fields of the TLS handshake so an observer learns only the public IP, never the hostname or negotiated parameters—the strongest handshake privacy.
Mechanism
The ClientHello splits into an outer layer (observable, carrying the ECH public key) and an encrypted inner layer (holding the real SNI, ALPN, and inner extensions). The server decrypts the inner layer with the ECH key to select the certificate and protocol.
Use cases
- TLS handshake encryption
- Domain name privacy
- Censorship resistance
Related tools
HTTP Status Codes
Reference table of common HTTP status codes (1xx-5xx) with names, categories, and descriptions. Free, private, and 100% client-side. TOOL
URL Parser
Parse a URL into its components: protocol, host, path, query, hash, port, username, and password. Free, private, and 100% client-side. TOOL