Technical dictionary
Encrypted Client Hello (ECH)
TLS feature hiding SNI and related ClientHello fields—metadata privacy, not a PQC substitute.
Definition
ECH encrypts sensitive ClientHello fields so passive observers learn less about destinations. It addresses privacy metadata.
Harvest-now-decrypt-later still targets classical key exchange. Deploy ECH and hybrid/PQC as complementary controls.