While ECH Adoption Is Low, Risks Remain for Enterprises, End Users

The report examines Encrypted Client Hello (ECH), showing that while ECH improves user privacy it reduces enterprise visibility; current adoption is low (about 0.06% of connections and ~10% of top sites support ECH), is largely enabled via Cloudflare, and yet attackers—especially phishing sites—are already exploiting ECH to evade detection, so security teams must track adoption and adjust controls to avoid blind spots.