Using an obscure feature of one TLS library seems like a bad strategy for avoiding bugs. If compatibility doesn't matter, I'd probably use something less cruft

Using an obscure feature of one TLS library seems like a bad strategy for avoiding bugs. If compatibility doesn't matter, I'd probably use something less crufty, like http://noiseprotocol.org/ http://noiseprotocol.org/