The OpenSSL Library now supports Encrypted Client Hello (ECH)

Previous posts about the upcoming OpenSSL 4.0 release:

  1. [removing ENGINE code](https://openssl-library.org/post/2025-12-18-remove-engines)
  2. [removing deprecated functions for creating or modifying custom METHODS](https://openssl-library.org/post/2026-02-03-remove-methods)
  3. [no longer registering a function via atexit function](https://openssl-library.org/post/2026-02-19-remove-atexit)

## Summary

The OpenSSL Library now supports Encrypted Client Hello (ECH) specified in
[RFC 9849](https://www.rfc-editor.org/rfc/rfc9849.txt), which was published
this month. Applications that implement this standard will be able to encrypt
sensitive information that is currently transmitted in plaintext in the TLS
1.3 handshake. In particular, ECH can protect the client's target server name
from being revealed to third parties.



URL: https://openssl-library.org/post/2026-03-11-ech/

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/637cb8c4-1319-403b-99cf-0101a19b41c6%40localhost.