On: TurboTLS: TLS connection establishment with 1 less...

[ekr____]

TLS 1.3 and QUIC both support 0-RTT modes as well (as noted in the original paper). Note that anything that runs over TCP of course first has to absorb the TCP round-trip (modulo TFO) whatever crypto it uses. That's why QUIC uses UDP, and the motivation for the use of UDP in TurboTLS.

[baby → ekr____]

You can also use QUIC with noise (check nQUIC). The motivation behind using noise is that its much much much simpler, and so are the implementations