Vercel has added Encrypted Client Hello support to Vercel CDN, a small changelog item with a practical privacy angle for hosted sites.

The company says ECH is now available for domains managed by Vercel DNS and is handled at the platform level, enabling automatically where supported. ECH encrypts the Server Name Indication portion of the TLS handshake, so a network observer should see a connection to Vercel’s shared ECH hostname rather than the exact customer hostname being visited.

Why site operators should care

For years, HTTPS protected page contents while the destination hostname often remained visible during connection setup. ECH is part of the broader effort to close that gap. For developers and businesses using managed edge hosting, the important operational point is that this is becoming a CDN feature rather than a custom TLS project.

There are caveats. ECH depends on client, DNS and platform support, so coverage will vary by browser and network path. Vercel points to recent Chrome, Edge and Firefox support, but the feature should be treated as incremental privacy hardening rather than a universal anonymity layer.

The hosting takeaway: TLS defaults are still moving. Providers that own the DNS/CDN/control-plane loop can roll out privacy and certificate changes with little customer action, while teams splitting DNS, CDN and deployment across vendors may need to watch compatibility and documentation more closely.

Source: Vercel changelog: Encrypted Client Hello is now supported on Vercel CDN.