A monitoring probe of ours matched on the substring "Cipher is" to
decide a TLS handshake had succeeded. A failed handshake prints
"New, (NONE), Cipher is (NONE)" - which contains it. It reported
github.com and amazon.com as compliant for weeks. The success
criterion was a substring of the error line.