01
What Encrypted Client Hello Hides—and What You Still Need to Protect
ECH can hide part of a TLS connection setup. It does not hide your account identity or every network address, and it is not a reason to assume browsing is anonymous.
Topic
ECH can hide part of a TLS connection setup. It does not hide your account identity or every network address, and it is not a reason to assume browsing is anonymous.
Encrypted DNS protects the lookup on its way to a resolver. The resolver still handles the query, so choose an operator and configuration you understand.
A published cryptographic standard is not an automatic upgrade to your VPN. Look for a documented implementation in the product you actually use.