nostr:npub15zu89j2k6sja8qgcs5qdu2pfra5kemhlgeern2cpcw2svkuvkudqu3s7lx Cloudflare article seems to explain it better. 

https://blog.cloudflare.com/announcing-encrypted-client-hello/