Encrypted Client Hello in NGINX: Now Shipping in Our RPMs and DEBs

by Danila Vershinin, August 25, 2026

Server-side ECH (RFC 9849) is live in our stock NGINX, NGINX-MOD and EDGE packages, on RPM and DEB alike, built on OpenSSL 3.5 LTS with the DEfO backport. Here is what it hides, what it does not, and how to run it with automatic key rotation.