Is it possible for kresd as a TLS forwarding client to reuse a TLS Session ID or use “Session tickets” instead of performing a full TLS handshake at each TCP connection (certificate download…) ?
Or maybe the public DNS-over-TLS Server needs to support it (I am currently testing with Quad9).
It could lower the latency of DNS queries when using DNS-over-TLS.
Thanks,