TLS via autocert is tracked separately.)
Notes
- Verification happens at tunnel-creation time and fits the existing ephemeral, in-memory cnameMap model.
- Adds DNS-lookup latency to tunnel start only when --cname is used.
- No new dependencies — stdlib net only.
TLS via autocert is tracked separately.)
Notes