SNI / ECH (Encrypted Client Hello) not available on macOS

Hi,

I tested Brave browser on Cloudflare’s security check tool:

I searched brave://flags for “ECH”, “encrypted”, and “TLS”
but found no related flag.

Firefox supports ECH via about:config. Since Brave is Chromium based
and Chromium has ECH support, is there a way to enable it in Brave?
Or is this planned for a future release?

Brave version: 1.90.128
OS: macOS

@barishizm

Brave Browser v1.90.128
MacOS 14.8.7 Sonoma
Private Window
Global Shields UP
JavaScript - Allowed for Cloudflare
Secure DNS - Disabled
Guest Wi-Fi
VPN
Brave Site-Specific Shields:

  • Trackers & Ads - Aggressively Blocked
  • Fingerprinting - Blocked
  • Third-Party Cookies - Blocked

Okay, now I see.

My setup was Router level DoT with Cloudflare,
and Brave’s internal “Use secure DNS” was set to “OS default”

Fix: Go to brave://settings/security → “Use secure DNS” →
enable it and select Cloudflare (1.1.1.1).

After that, all 4 tests pass including Secure SNI (ECH).

So, Router DoT alone is not enough for ECH to work in Brave.
The browser needs its own DoH configured to Cloudflare as well.