Vercel CDN turns on Encrypted Client Hello, hiding SNI behind a shared vercel-ech.com hostname
Vercel Changelog·low signal
As of August 14, 2026, Vercel CDN supports ECH for domains using Vercel DNS, encrypting the Server Name Indication in the TLS handshake — the last plaintext field revealing which host a client is connecting to. Connections route through a shared hostname, vercel-ech.com, instead of exposing the real destination. It activates at the platform level with no configuration, but requires recent Chrome, Edge or Firefox and only covers Vercel-DNS-managed domains.