Jan Hák authored 1 year ago and Daniel Salzman committed 1 year ago

utils: upgrade common QUIC connection code with 1-RTT payload send and reduce PING frames sent over network

It showed that having DS without NS can be convenient for private zones
with DNSSEC:
"Tuomo Soini: Anybody from internet gets NXDOMAIN because public dns servers
 don't know anything about internal zone."

This partially reverts:
 b0da0e11
 f7b0793f

The reason is described in the GnuTLS doc:
"In versions of GnuTLS later than 3.5.11 the object is protected using locks and
 a single gnutls_pkcs11_privkey_t can be re-used by many threads. However,
 for performance it is recommended to utilize one object per key per thread."