A monitoring probe of ours matched on the substring "Cipher is" to decide a TLS handshake had succeeded. A failed handshake prints "New, (NONE), Cipher is (NONE

A monitoring probe of ours matched on the substring "Cipher is" to decide a TLS handshake had succeeded. A failed handshake prints "New, (NONE), Cipher is (NONE)" - which contains it. It reported github.com and amazon.com as compliant for weeks. The success criterion was a substring of the error line.