Wyden Seeks Federal Encrypted Client Hello Mandate
Senator Ron Wyden urges federal agencies to adopt Encrypted Client Hello to secure web traffic against adversaries.
Updated on Oct. 20, 2026 in Cybersecurity

Live Poll
Do you trust the government to adequately protect your digital privacy on its websites?
Senator Ron Wyden has formally requested that the Trump administration mandate the use of Encrypted Client Hello across all federal agencies. This technology secures connections by encrypting website names during user visits.
Why it matters
The current encryption gap leaves sensitive government website visits vulnerable to foreign adversaries. Requiring this protocol would better align federal cybersecurity practices with established zero trust principles.
Over 350 federal web addresses, including the FBI tip portal and the Veterans Crisis Line, currently lack Encrypted Client Hello support. This protocol prevents adversaries from identifying specific sites visited by encrypting the website name during connection.
The players
Ron Wyden
Ron Wyden is a United States Senator who frequently focuses on digital privacy and national cybersecurity policy.
Cybersecurity and Infrastructure Security Agency
The Cybersecurity and Infrastructure Security Agency is the federal body responsible for protecting critical infrastructure against physical and cyber threats.
Office of Management and Budget
The Office of Management and Budget oversees the implementation of the President's vision across the executive branch and federal agencies.
The details
Senator Wyden has proposed that the government require all cloud and network providers to support Encrypted Client Hello as a prerequisite for winning federal contracts. This move aims to close vulnerabilities on critical platforms, such as the Veterans Crisis Line and the FBI tip portal, that are currently exposed.
Timeline
October 20, 2026: Senator Ron Wyden issued a formal letter to the Cybersecurity and Infrastructure Security Agency and the Office of Management and Budget.
The Tech Race
This proposal aligns with the federal Zero Trust Architecture mandate, representing a push to modernize legacy security protocols across government networks. It positions agency security requirements to counter sophisticated foreign adversaries who monitor unencrypted connection metadata.
For citizens, this mandate would enhance the privacy and security of their interactions with sensitive government portals, such as crisis lines and law enforcement reporting tools. It ensures that the metadata of one's digital interactions with the federal government remains shielded from prying eyes.
The takeaway
Securing metadata is a crucial step in preventing external actors from mapping out how the public interacts with government services. Implementing standardized encryption protocols across all federal domains is a vital practice for maintaining user privacy and system integrity.
Further reading
Learn more about the latest updates in United States Cybersecurity.
Live Poll
Do you trust the government to adequately protect your digital privacy on its websites?










