# Encrypted Client Hello (ECH) is now supported on Vercel CDN

DevFeed: [Encrypted Client Hello (ECH) is now supported on Vercel CDN](<https://devfeed.tech/articles/encrypted-client-hello-ech-is-now-supported-on-vercel-cdn-912.md>)

Original publisher: [Read original article](<https://vercel.com/changelog/encrypted-client-hello-now-supported-on-vercel-cdn>)

Author: Faryal Siddiqui

Published: 2026-08-14T16:00:00Z

Content type: release

Language: en

Sources: [Vercel News](<https://devfeed.tech/sources/vercel-news.md>)

Topics: [Cryptography](<https://devfeed.tech/topics/cryptography.md>)

Tags: [cdn](<https://devfeed.tech/tags/cdn.md>), [chrome](<https://devfeed.tech/tags/chrome.md>), [dns](<https://devfeed.tech/tags/dns.md>), [edge](<https://devfeed.tech/tags/edge.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [firefox](<https://devfeed.tech/tags/firefox.md>), [tls](<https://devfeed.tech/tags/tls.md>), [vercel](<https://devfeed.tech/tags/vercel.md>)

## AI overview

Vercel CDN now supports Encrypted Client Hello for domains managed by Vercel DNS, encrypting SNI during the TLS handshake. The rollout begins selectively in the US for limited TLDs and will expand over time.

## Source excerpt

Vercel CDN now supports Encrypted Client Hello (ECH) for domains managed by Vercel DNS. ECH encrypts the Server Name Indication (SNI) in the TLS handshake, the last part of an HTTPS connection that revealed which hostname a client was connecting to. With ECH, network observers see a connection to Vercel's shared ECH hostname, vercel-ech.com. ECH is managed at the platform level and automatically enabled selectively where supported, starting in the US for a limited number of TLDs, and expanding to more TLDs and regions over time. Recent versions of Chrome, Edge, and Firefox support Encrypted Client Hello. Learn more about ECH and how Vercel CDN protects your application in the CDN encryption documentation. Read more