guess it depends how ssl is negotiated