%20--%3e%3ccircle%20cx='32'%20cy='32'%20r='30'%20fill='rgba(99,102,241,0.05)'%20stroke='url(%23icon-gradient)'%20stroke-width='1.5'/%3e%3c!--%20Left%20bracket%20%3c%20--%3e%3cpath%20d='M12%2020L4%2032L12%2044'%20stroke='url(%23icon-gradient)'%20stroke-width='4'%20stroke-linecap='round'%20stroke-linejoin='round'%20fill='none'/%3e%3c!--%20Central%20E%20--%3e%3cpath%20d='M22%2018H42V24H28V29H40V35H28V40H42V46H22V18Z'%20fill='url(%23icon-accent)'/%3e%3c!--%20Right%20bracket%20%3e%20--%3e%3cpath%20d='M52%2020L60%2032L52%2044'%20stroke='url(%23icon-gradient)'%20stroke-width='4'%20stroke-linecap='round'%20stroke-linejoin='round'%20fill='none'/%3e%3c!--%20Decorative%20dots%20--%3e%3ccircle%20cx='32'%20cy='10'%20r='2'%20fill='%23818CF8'%20opacity='0.7'/%3e%3ccircle%20cx='32'%20cy='54'%20r='2'%20fill='%236366F1'%20opacity='0.7'/%3e%3c/svg%3e){kind=small}
Security Vulnerabilities Guide
Understanding and fixing common web security vulnerabilities detected by VitaPulse
Your server does not support Encrypted Client Hello, which means the domain name (SNI) is visible during the TLS handshake.
Without ECH, the domain name you're connecting to is sent in plaintext during the TLS handshake, even though the rest of the connection is encrypted. This allows network observers (ISPs, firewalls, governments) to see which websites users visit, enabling censorship and surveillance. ECH encrypts this information for enhanced privacy.
ECH requires DNS-over-HTTPS (DoH) and specific server support. Currently, Cloudflare supports ECH. If you use Cloudflare, enable it in the SSL/TLS settings. For other providers, check their ECH support status as it is still being rolled out.
# Cloudflare: Enable ECH in SSL/TLS > Edge Certificates