They've also done the correlation with User Agent and it's surprisingly accurate.
Original post by Salesforce security team: https://engineering.salesforce.com/tls-fingerprinting-with-j...