From d656ff945865060150fab5f0c215b0079c37cc60 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Fri, 8 May 2026 13:13:20 +0200 Subject: [PATCH] CURLOPT_ECH.md: simplify the description language It no longer requires "a special build" of OpenSSL, just OpenSSL 4+. Emphasize the experimental part a little clearer. Drop the caveat for wolfSSL from the main description. Closes #21536 --- docs/libcurl/opts/CURLOPT_ECH.md | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) diff --git a/docs/libcurl/opts/CURLOPT_ECH.md b/docs/libcurl/opts/CURLOPT_ECH.md index e409d58cec..99d3ddaefc 100644 --- a/docs/libcurl/opts/CURLOPT_ECH.md +++ b/docs/libcurl/opts/CURLOPT_ECH.md @@ -29,15 +29,11 @@ CURLcode curl_easy_setopt(CURL *handle, CURLOPT_ECH, char *config); # DESCRIPTION +This feature is **experimental** and may change before it is considered +stable. We advise against using it in production. + ECH is only compatible with TLSv1.3. -This experimental feature requires a special build of OpenSSL, as ECH is not -yet supported in OpenSSL releases. In contrast ECH is supported by the latest -BoringSSL, wolfSSL and Rustls-ffi releases. - -There is also a known issue with using wolfSSL which does not support ECH when -the HelloRetryRequest mechanism is used. - Pass a string that specifies configuration details for ECH. In all cases, if ECH is attempted, it may fail for various reasons. The keywords supported are: