So ... why do they continue with tls_rsa? Is it required because of middleboxes lagging behind?