We did a thing. We combined TLS and MLS into a hybrid protocol. Of course, when things get serious, full names are in order: We combined the Transport Layer Security protocol and the Messaging Layer Security protocol. This blog post is about the why and the how.
QUIC+MLS could be super efficient since QUIC already handles connection migration and reduces handshake latency, while MLS would add the secure group messaging layer on top without duplicating crypto operations thats already handled by QUIC.