echtool-web

Probe ECH (Encrypted Client Hello) deployments with customizable ECH configurations.

Measurement host only has IPv4 connectivity. IPv6 is supported by echtool cli.

Probe configuration

Command

Transport

Target domain

ECH configuration (base64)

Public name / SNI override

Config ID (0-255)

ECH version

Max name length

Cipher suites (comma-separated, e.g. SHA256/AES128GCM)

ALPN (comma-separated)

DNS server (host:port)

Insecure (skip certificate verification)

Validate first RetryConfiguration

Validate all RetryConfigurations