One imagines djb envisioning a single roundtrip for encrypted HTTP, built on top of DNSCurve. You have the public key via DNS, you send an encrypted request an

One imagines djb envisioning a single roundtrip for encrypted HTTP, built on top of DNSCurve. You have the public key via DNS, you send an encrypted request and receive a verifiable encrypted response that includes content and begins the multiplexed channel.