ECH
RU: ECH
Encrypted Client Hello (RFC 9849): a TLS 1.3 extension that encrypts the inner ClientHello — including the Server Name Indication — under a public key the server publishes in DNS. Without ECH the target domain is visible in plaintext to network observers even when the connection content is encrypted.