ECH stands for Encrypted Client Hello. It is a protocol extension in the context of Transport Layer Security (TLS). ECH encrypts part of the handshake and masks the Server Name Indication (SNI) that is used to negotiate a TLS session. This means that whenever a user visits a website on Cloudflare that has ECH enabled, intermediaries will be able to see that you are visiting a website on Cloudflare, but they will not be able to determine which one.| Cloudflare Docs
DoH improves privacy by hiding domain name lookups from anyone lurking on public Wi-Fi, your ISP or others on your local network. Learn more.| support.mozilla.org