This memo defines a mechanism for SSH clients and servers to exchange information about supported protocol extensions confidentially after completed key exchange. This is done while optimizing protocol startup to eliminate the round-trip the original protocol requires on messages SSH_MSG_SERVICE_REQUEST and SSH_MSG_SERVICE_ACCEPT.