3 ms·

Server could advertise no need to use SNI in advance. Or we could do SNI after actually establishing an encrypted session...