Kernel TLS offload for Elixir

Interesting, am I understanding this correctly that the “new” socket is still under TLS but can use the socket API instead of the SSL API.