Change default ECH key rotation interval

Camis · January 22, 2026, 10:29am

I have the beta version in Docker. Is it possible to set my own ECH key rotate time without changing the code and compiling from GitHub?

For example:
rotation interval 24h
key lifetime 48h

matt · January 22, 2026, 4:30pm

Not currently. it is hard-coded:

github.com/caddyserver/caddy

modules/caddytls/ech.go

565c1c305


      
          	// all existing configs are now loaded; rotate keys "regularly" as recommended by the spec
          	// (also: "Rotating too frequently limits the client anonymity set." - but the more server
          	// names, the more frequently rotation can be done safely)
          	const (
          		rotationInterval = 24 * time.Hour * 30
          		deleteAfter      = 24 * time.Hour * 90
          	)

Why do you need to change it?