Vercel CDN now supports Encrypted Client Hello (ECH) for domains managed by Vercel DNS. ECH encrypts the Server Name Indication (SNI) in the TLS handshake, the last part of an HTTPS connection that revealed which hostname a client was connecting to. With ECH, network observers see a connection to Vercel's shared ECH hostname, vercel-ech.com.

ECH is managed at the platform level and enables automatically where supported. Recent versions of Chrome, Edge, and Firefox support Encrypted Client Hello.

Learn more about ECH and how Vercel CDN protects your application in the CDN encryption documentation.