The HTTPS record publishes an Encrypted Client Hello configuration.

SVCB_ECH · Severity: Info

• InfoSVCB_ECH

  The HTTPS record publishes an Encrypted Client Hello configuration.

  The ech parameter carries a key that lets browsers encrypt the TLS Client Hello, including the server name, when they connect. The configuration itself is not shown or checked.

Reported by

• HTTPS record check

Available through the API

• HTTPS record check API

Related findings

• Warning SVCB_ALIAS_CONFLICT An HTTPS AliasMode record sits beside other HTTPS records.
• Warning SVCB_ALIAS_WITH_PARAMS An HTTPS AliasMode record has parameters, which clients ignore.
• Error SVCB_ALPN_MISSING An HTTPS record has no-default-alpn but no alpn parameter.
• Error SVCB_INVALID An HTTPS record cannot be read.
• Error SVCB_MANDATORY_MISSING An HTTPS record lists a mandatory parameter that it does not have.
• Info SVCB_NOT_FOUND The name publishes no HTTPS record.

All findings