Encrypted Client Hello - the last puzzle piece to privacy

What this post added

Introduced Encrypted Client Hello (ECH) as a successor to ESNI, available on all Cloudflare plans. ECH encrypts the Server Name Indication (SNI) during the TLS handshake, preventing network intermediaries from determining which specific website a user is visiting. The implementation involves splitting the ClientHello message into an outer, non-sensitive part with a shared SNI (cloudflare-ech.com) and an inner, encrypted part with the actual server name, readable only by Cloudflare.