Encrypted Client Hello in NGINX: Now Shipping in Our RPMs

by Danila Vershinin, August 25, 2026

Server-side ECH (RFC 9849) is live in NGINX-MOD and EDGE, built on OpenSSL 3.5 LTS with the DEfO backport. Here is what it hides, what it does not, and how to run it with automatic key rotation.