I am not completely against de-facto standards, but, in the TLS space, Chacha20/Poly1305 is not one. At this time it's mostly used only by Google/Chrome (AFAIK,

I am not completely against de-facto standards, but, in the TLS space, Chacha20/Poly1305 is not one. At this time it's mostly used only by Google/Chrome (AFAIK, no other clients support it); we'd need to see better browser support (multiple organisations) and wider server-side support before we can accept it on the basis of widespread use. Accepting non-standard crypto is a slippery slope, which is why I'd rather take a very conservative approach. P.S. You mean RFC 7539, which came out only a couple of days ago. Now we only need another RFC for the use in TLS.