TLS Privacy Milestone: Encrypted Client Hello Approved After 7-Year Journey
The TLS working group has finalized Encrypted Client Hello (ECH), closing TLS 1.3's last major privacy gap by encrypting server identities during handshakes. This breakthrough leverages DNS records to hide destination servers from snoopers, but faces geopolitical friction and middlebox challenges as deployments expand.