Discovering Encrypted Client Hello Deployments by Active ECH Probing

Research output: Contribution to book/Conference proceedings/Anthology/Report › Conference contribution › Contributed › peer-review

Contributors

Abstract

We present a new measurement method to detect ECH deployments. This method leverages standard-compliant behavior of ECH servers. Prior measurements relied on DNS exposure and reported only one major ECH deployment (Cloudflare). Our measurements reveal yet undiscovered ECH deployments, including a large deployment at Meta. Meta servers support ECH, but ECH configuration is not exposed via the DNS. We also empirically study details such as the level of privacy improvement and latency impact of ECH.

Details

Original languageEnglish
Title of host publicationProceedings of the 2026 ACM Internet Measurement Conference (IMC ’26)
PublisherAssociation for Computing Machinery (ACM)
Publication statusPublished - Oct 2026
Peer-reviewedYes

Conference

Title26th ACM Internet Measurement Conference
Abbreviated titleACM IMC 2026
Conference number26
Duration12 - 16 October 2026
Website
Degree of recognitionInternational event
LocationKarlsruher Institut für Technologie (KIT)
CityKarlsruhe
CountryGermany

External IDs

ORCID /0000-0002-3825-2807/work/226837881

Keywords

DFG Classification of Subject Areas according to Review Boards

Subject groups, research areas, subject areas according to Destatis