A mechanism that encrypts TLS ClientHello metadata to reduce hostname and configuration leakage during handshake.