> Changing the key exchange or transport encryption protocols however is much, much easier, as it's negotiated and we can add new options right away. So that’s

> Changing the key exchange or transport encryption protocols however is much, much easier, as it's negotiated and we can add new options right away. So that’s a good point. We can quickly add new encryption protocols after the point things are negotiated in the connection, but adding something new or entirely replacing the certificate system or even just the underlying protocols is a big deal.