PrivacySpy grades and monitors privacy policies through an open project intended to support informed data privacy decisions.
FreePick
24 alternativesEncrypted SNI
Learn about encrypted DNS transports and SNI with ECH in Cloudflare Browser Check documentation.
About Encrypted SNI
This page is part of Cloudflare Browser Check documentation. It explains four browser checks: Secure DNS, DNSSEC, TLS 1.3, and Secure SNI with Encrypted Client Hello (ECH). It describes how plaintext DNS queries and unencrypted handshake details can expose which sites you visit.
You can use it to understand what a pass or failure means for each test. A failure indicates browsing data could be vulnerable to observation or fraudulent DNS responses, while a pass indicates your browser or resolver supports that feature. The page also outlines secure DNS transport with DNS over HTTPS and DNS over TLS, DNSSEC authenticity checks, TLS 1.3 certificate encryption, and ECH protection for Server Name Indication.
It suits general web users who want to check browser privacy support and understand the results. It is also relevant for readers learning how DNS and TLS settings affect privacy when visiting different domains.
Key features
- Explains Secure DNS using DoH and DoT
- Describes how DNSSEC verifies DNS response authenticity
- Describes TLS 1.3 encryption of server certificates
- Explains Secure SNI with Encrypted Client Hello
- Explains meaning of pass and failure test results
Best for: General web users who want to understand browser privacy test results.
Good for
- Covers four related privacy technologies in one place
- Explains pass and failure results in plain terms
- Notes that visited domains must also support the technologies
Watch out for
- Passing all tests does not ensure security on all sites
- ECH is not yet widely available for web services
Encrypted SNI at a glance
- Category
- Privacy & Security › Privacy Guides
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Encrypted SNI alternatives
Tools and sites you could use instead, ranked by how closely they match.
Explore this curated list of resources for learning about vehicle security and car hacking.
Open source
24 alternatives
Privacy Guides compares desktop browser options for standard, non-anonymous browsing and explains the privacy protections each setup targets.
Review the Paranoia Privacy wiki source repository hosted on Codeberg.
Read Team Elite news and release updates, including its listed trading desk and network forum sections.
Surveillance Watch maps connections between surveillance companies, their funding sources, and affiliations.
Popular in Privacy Guides
Well-known listings from the same topic.
No Tracenotrace.howSafing Portmastersafing.ioDigital Defensedigital-defense.ioEncryptedListencryptedlist.xyzAwesome Privacyawesome-privacy.xyz
Encrypted SNI FAQ
What does a failure mean on Cloudflare Browser Check?
A failure indicates browsing data could be vulnerable. Another party could see visited sites or certificates, or a fraudulent DNS response could send you to an unintended party.
Does passing all four tests mean I am secure on every site?
No. The visited domain must also support DNSSEC, TLS 1.3, and Secure SNI, otherwise you remain potentially vulnerable.
What is Secure SNI with ECH?
ECH is an extension of the TLS handshake that prevents exposure of privacy-sensitive parameters. This includes Server Name Indication, which would otherwise reveal the hostname you want to connect to.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.