Limit ciphers to those that support forward secrecy
Announce server info only after connection is secured