TLS ECH (Encrypted Client Hello) visually explained

An visual walkthrough of TLS ECH. See why SNI leaks which site you visit, and how Encrypted Client Hello hides it using HPKE, split-mode proxying, and a clever retry mechanism.