Skip to content
Senator Wyden Calls for Encryption to Protect Sensitive Federal Web Traffic

Senator Wyden Calls for Encryption to Protect Sensitive Federal Web Traffic

First seen 20 Oct 2026, 00:21 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 20, 2026 at 01:52 UTC
  • •Senator Wyden identified 350 federal sites lacking ECH encryption.
  • •The absence of ECH exposes sensitive user traffic to foreign adversaries.
  • •Wyden has called for immediate action from CISA and OMB to implement ECH.

Senator Ron Wyden has urged the Trump administration to adopt the Encrypted Client Hello (ECH) protocol to protect sensitive traffic on at least 350 federal websites, including those for the FBI and the Department of Veterans Affairs. The lack of ECH allows foreign adversaries to track visits to these sites, potentially exposing whistleblowers and individuals seeking crisis support. Wyden's letter to the Cybersecurity and Infrastructure Security Agency (CISA) and the Office of Management and Budget (OMB) highlights that while most federal sites use standard encryption, the names of the websites visited remain visible to eavesdroppers. He specifically noted that the FBI's tip portal and the Veterans Crisis Line are particularly vulnerable. Wyden has requested that CISA and OMB respond by November 20, 2026, and has recommended that ECH support be a requirement for federal contracts with cloud and network providers.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-19
Wyden sends letter to CISA and OMB
Senator Wyden urged the adoption of ECH to protect sensitive traffic on federal websites, highlighting vulnerabilities in key services.
Nextgov
2026-10-19
Wyden's encryption request reported
Cyberscoop reported on Wyden's call for ECH adoption to safeguard whistleblowers and veterans using federal websites.
Cyberscoop

More articles in this cluster (2)

Following this threat?

Track Amazon Web Services in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (3)

1 / 2

Common questions

Which federal websites are affected?
At least 350 federal websites are identified as lacking ECH, including the FBI's tip portal and the Veterans Crisis Line.
What is Encrypted Client Hello?
Encrypted Client Hello (ECH) is a protocol that protects the names of websites visited by users, enhancing privacy against eavesdropping.
What actions are being taken to address this issue?
Senator Wyden has requested CISA and OMB to implement ECH across federal websites and to make ECH support a requirement for federal contracts.