On: Addressing Visibility Challenges with TLS 1.3 Within the Enterprise

[cipherboy]

https://csrc.nist.gov/pubs/sp/1800/37/2prd

It seems to be intentional exfiltration of key material (either bounded DH keypairs rather than ephemeral or, more likely, exfil of the symmetric channel key).