According to [Cloudflare][1], TLSv1.3 connections are established in a single round trip.

If that is the case, then in the first packet to the server (after the TCP handshake), the client must include everything the server will need for symmetric encryption, including the key and cipher suite. That means that the client would have to choose a suite without any input from the server.

How can the client be sure to pick a cipher suite that the server supports?

  [1]: https://blog.cloudflare.com/introducing-0-rtt/