diff --git a/draft-ietf-tls-svcb-ech.md b/draft-ietf-tls-svcb-ech.md
index 8bb2c3e..c34a263 100644
--- a/draft-ietf-tls-svcb-ech.md
+++ b/draft-ietf-tls-svcb-ech.md
@@ -56,7 +56,7 @@ In wire format, the value of the parameter is an ECHConfigList ({{Section 4 of !
 ech="AEj+DQBEAQAgACAdd+scUi0IYFsXnUIU7ko2Nd9+F8M26pAGZVpz/KrWPgAEAAEAAWQ
 VZWNoLXNpdGVzLmV4YW1wbGUubmV0AAA="
 ~~~
-{: title="ECH SvcParam with a public_name of "ech-sites.example.com"}
+{: title="ECH SvcParam with a public_name of "ech-sites.example.com""}
 
 # Server behavior
 
@@ -90,6 +90,97 @@ Origins that publish an "ech" SvcParam in their HTTPS record SHOULD also publish
 
 If all HTTPS records for an alt-authority contain "ech" SvcParams, the client MUST adopt SVCB-reliant behavior (as in {{disabling-fallback}}) for that RRSet.  This precludes the use of certain connections that Alt-Svc would otherwise allow, as discussed in {{Section 9.3 of !SVCB}}.
 
+# Examples
+
+~~~
+$ORIGIN simple.example. ; Simple example zone
+@ 300 IN A     192.0.2.1
+         AAAA  2001:db8::1
+         HTTPS 1 . ech=ABC...
+www 300 IN A 192.0.2.1
+           AAAA 2001:db8::1
+           HTTPS 1 . ech=ABC...
+~~~
+{: title="Simple example zone with the same configuration on the apex and web domain.  It is compatible with clients that do or do not support HTTPS records."}
+
+~~~
+$ORIGIN heterogeneous.example. ; Example zone with two pools of servers
+pool1 300 IN    A    192.0.2.1
+                AAAA 2001:db8:1::a
+pool2 300 IN    A    192.0.2.2
+                AAAA 2001:db8:2::a
+service 300 IN SVCB 1 pool1 ech=ABC...
+               SVCB 1 pool2 ech=DEF...
+               A 192.0.2.1
+               A 192.0.2.2
+               AAAA 2001:db8:1::a
+               AAAA 2001:db8:2::a
+~~~
+{: title="Service that allows clients to choose between two server pools with different ECH configurations."}
+
+~~~
+$ORIGIN cdn.example. ; CDN operator zone
+pool 300 IN A 192.0.2.1
+            AAAA 2001:db8::1
+            HTTPS 1 . ech=ABC...
+
+$ORIGIN customer.example. ; CDN customer's zone
+@   3600 IN HTTPS 0 pool.cdn.example.
+; Apex IP records for compatibility with clients that do not support
+; HTTPS records.
+@   300  IN A    192.0.2.1
+            AAAA 2001:db8::1
+
+www 300  IN CNAME pool.cdn.example.
+~~~
+{: title="ECH usage pattern for an aliasing-based CDN."}
+
+~~~
+$ORIGIN secret.example. ; High confidentiality zone
+www     3600 IN HTTPS 1 backend ech=ABC... mandatory=ech
+backend 300  IN A     192.0.2.1
+                AAAA  2001:db8::1
+~~~
+{: title="A domain that is only reachable using ECH."}
+
+~~~
+$ORIGIN cdn1.example. ; First CDN operator zone
+pool 300 IN A     192.0.2.1
+            AAAA  2001:db8::1
+            HTTPS 1 . ech=ABC...
+
+$ORIGIN cdn2.example. ; Second CDN operator zone
+pool 300 IN A     192.0.2.2
+            AAAA  2001:db8::2
+            HTTPS 1 . ech=DEF...
+
+;; Multi-CDN customer zone (version 1)
+$ORIGIN customer.example.
+@   3600 IN HTTPS 0 pool.cdn1.example.
+; Apex IP records for compatibility with clients that do not support
+; HTTPS records.
+@   300  IN A    192.0.2.1
+            AAAA 2001:db8::1
+www 3600  IN CNAME pool.cdn1.example.
+
+;; Multi-CDN customer zone (version 2)
+@   3600 IN HTTPS 0 pool.cdn2.example.
+@   300  IN A    192.0.2.2
+            AAAA 2001:db8::2
+www 3600  IN CNAME pool.cdn2.example.
+~~~
+{: title="Multi-CDN configuration using server-side selection."}
+
+~~~
+$ORIGIN dns.example. ; DNS server example.
+@    3600 IN A     192.0.2.1
+             AAAA  2001:db8::1
+             HTTPS 1 . ech=ABC... alpn=h3 dohpath=/q{?dns}
+
+_dns 3600 IN SVCB  1 @ ech=ABC... alpn=dot,doq,h3 dohpath=/q{?dns}
+~~~
+{: title="Example of a DNS server that supports ECH."}
+
 # Security Considerations
 
 A SVCB RRSet containing some RRs with "ech" and some without is vulnerable to a downgrade attack: a network intermediary can block connections to the endpoints that support ECH, causing the client to fall back to a non-ECH endpoint.  This configuration is NOT RECOMMENDED. Zone owners who do use such a mixed configuration SHOULD mark the RRs with "ech" as more preferred (i.e. lower SvcPriority value) than those without, in order to maximize the likelihood that ECH will be used in the absence of an active adversary.