The TLS 1.3 handshake, in plain termsOne round trip instead of two, and why the ServerHello already carries a key share.