# Server info in SSL handshake?

**URL:** <https://www.ruby-forum.com/t/server-info-in-ssl-handshake/242375>\
**Category:** NGINX\
**Created:** [June 19, 2015, 2:54pm UTC](https://www.ruby-forum.com/t/server-info-in-ssl-handshake/242375 "2015-06-19T14:54:15Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Detlef\_R](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/58f4c7/32.png) [@Detlef\_R](https://www.ruby-forum.com/u/Detlef_R)\
**Post date:** [June 19, 2015, 2:54pm UTC](https://www.ruby-forum.com/t/server-info-in-ssl-handshake/242375/1 "2015-06-19T14:54:15Z")

</div>

Hi, today I was watching traffic on port 443 for other reasons  
and I saw a line go by that had unusual information, looking  
a little bit like server info headers (I saw “nginx” and the version  
number and a couple other info I think maybe “REMOTE\_ADDR”  
or something like it). Its port 443 so it surprised me – does  
some server info leak out during the SSL handshake?

I saw it at least twice but now it isn’t coming back and I wasn’t  
able to capture it. ☹

---

<div class="post-metadata">

**Author:** ![E.B](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/bcef8e/32.png) [@E.B](https://www.ruby-forum.com/u/E.B)\
**Post date:** [June 19, 2015, 3:11pm UTC](https://www.ruby-forum.com/t/server-info-in-ssl-handshake/242375/2 "2015-06-19T15:11:12Z")

</div>

Sorry, I think false alarm. I think it happened when I  
removed the port so listening on all ports and it caught  
traffic to php-fpm immediately below the traffic from  
the outside to nginx so it looked like the server info  
was on port 443 but i think it was not.

* * *

Subject: Server info in SSL handshake?  
To: removed\_email\_address@domain.invalid

Hi, today I was watching traffic on  
port 443 for other reasons  
and I saw a line go by that had unusual information,  
looking  
a little bit like server info headers (I saw “nginx” and the  
version  
number and a couple other info I think maybe “REMOTE\_ADDR”  
or something like it). Its port 443 so it surprised me –  
does  
some server info leak out during the SSL handshake?

I saw it at least twice but now it isn’t coming back and I  
wasn’t  
able to capture it. ☹