@alwayscurious @filippo I don't believe DNSSEC and thus ECH is happening in general, at least not any time soon. Among other issues, it's too operationally fragile.

(.de blew its own feet off recently, for example. If a major country domain screws it up, what small organization wants to touch it?)