Random thought from someone with little theoretical experience with TLS. What would be offloaded to hardware? And would that not create a possible security/backdoor issue if there's no access to see how this is implemented by the hardware? I'm sure we offload things like this to hardware already with other technologies. Like I said, random thought.

Wouldn’t this help implement sendfile for TLS connection as well?