On Tue, Jun 09, 2020 at 11:53:19PM -0400, Michael Lazar wrote: > > > and it always sets TLS_CIPHER and TLS_VERSION. > > Why not? These are just as useful even if the client doesn't send a > certificate. Sorry if this is a silly question, but how *are* these useful in a CGI script? Cheers, Solderpunk