Leitfaden für Sicherheitslücken

Häufige Web-Sicherheitslücken verstehen und beheben, die von VitaPulse erkannt werden

Niedrig
No Encrypted Client Hello (ECH)

Your server does not support Encrypted Client Hello, which means the domain name (SNI) is visible during the TLS handshake.

Risiko

Without ECH, the domain name you're connecting to is sent in plaintext during the TLS handshake, even though the rest of the connection is encrypted. This allows network observers (ISPs, firewalls, governments) to see which websites users visit, enabling censorship and surveillance. ECH encrypts this information for enhanced privacy.

Lösung

ECH requires DNS-over-HTTPS (DoH) and specific server support. Currently, Cloudflare supports ECH. If you use Cloudflare, enable it in the SSL/TLS settings. For other providers, check their ECH support status as it is still being rolled out.

Beispiel
# Cloudflare: Enable ECH in SSL/TLS > Edge Certificates
Kommentare (0)

Noch keine Kommentare. Beginnen Sie die Diskussion!