Vigil Security This document specifies a TLS 1.3 extension that allows a server to authenticate with a certificate while providing an external pre- shared key (PSK) as an input to the key schedule.