Skip to content

Commit f107b7b

Browse files
[SSL, Protocols] Update ECH availability (#17085)
1 parent 785cb26 commit f107b7b

File tree

1 file changed

+1
-8
lines changed
  • src/content/docs/ssl/edge-certificates

1 file changed

+1
-8
lines changed

src/content/docs/ssl/edge-certificates/ech.mdx

Lines changed: 1 addition & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -10,13 +10,6 @@ sidebar:
1010

1111
ECH stands for [Encrypted Client Hello](https://datatracker.ietf.org/doc/draft-ietf-tls-esni/16/). It is a protocol extension in the context of Transport Layer Security (TLS). ECH encrypts part of the handshake and masks the Server Name Indication (SNI) that is used to negotiate a TLS session. This means that whenever a user visits a website on Cloudflare that has ECH enabled, intermediaries will be able to see that you are visiting a website on Cloudflare, but they will not be able to determine which one.
1212

13-
:::caution
14-
15-
ECH is disabled globally, and cannot currently be enabled in the Cloudflare Dashboard.
16-
17-
Starting in August, 2024, ECH will be gradually released on free zones. It will not be possible to disable it. A toggle will be added to the Cloudflare Dashboard at a later point before ECH is made available for other zone plans.
18-
:::
19-
2013
## What ECH does
2114

2215
ECH limits access to information that a particular user is visiting your website, ensuring that it is not unnecessarily shared with intermediaries, like Internet Service Provides (ISP). With ECH, specific details regarding their visit no longer leak to network intermediaries when the user accesses your website.
@@ -52,7 +45,7 @@ For more details about ECH protocol technology, refer to our [introductory blog]
5245

5346
## Enable ECH
5447

55-
To enable ECH, go to [**SSL/TLS** > **Edge Certificates**](https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls/edge-certificates) and enable **Encrypted ClientHello (ECH)**:
48+
ECH is enabled by default on Free zones. Other plans can turn it on or off following the steps below.
5649

5750
1. Log into the [Cloudflare dashboard](https://dash.cloudflare.com).
5851
2. Select your account and zone.

0 commit comments

Comments
 (0)