A communications system comprising: a client device; and a server device; the server device comprising server communication circuitry, configured to establish a server-authenticated first encrypted data path between the client device and the server device; and the client device comprising client communication circuitry, configured to provide client-specific information to the server device using the first encrypted data path; the server communication circuitry being configured to use the client-specific information provided by the client device to establish a second encrypted data path between the server device and the client device, the second encrypted data path being authenticated by at least the client device; in which the server communication circuitry is configured to establish the first encrypted data path and the second encrypted data path in response to respective connection initiation messages sent by the client device to the server device; in which the connection initiation messages each comprise an indication of a server name mapping to a device with which the client device is requesting connection; and in which: the server device is mapped to at least two server names; the server communication circuitry being configured to respond to a connection initiation message indicating a first server name to establish the first encrypted data path without requiring the client-specific information; and the server communication circuitry being configured to respond to a connection initiation message indicating a second server name to establish the second encrypted data path using the client-specific information. a client device; and a server device; the server device comprising server communication circuitry, configured to establish a server-authenticated first encrypted data path between the client device and the server device; and the client device comprising client communication circuitry, configured to provide client-specific information to the server device using the first encrypted data path; the server communication circuitry being configured to use the client-specific information provided by the client device to establish a second encrypted data path between the server device and the client device, the second encrypted data path being authenticated by at least the client device; in which the server communication circuitry is configured to establish the first encrypted data path and the second encrypted data path in response to respective connection initiation messages sent by the client device to the server device; in which the connection initiation messages each comprise an indication of a server name mapping to a device with which the client device is requesting connection; and in which: the server device is mapped to at least two server names; the server communication circuitry being configured to respond to a connection initiation message indicating a first server name to establish the first encrypted data path without requiring the client-specific information; and the server communication circuitry being configured to respond to a connection initiation message indicating a second server name to establish the second encrypted data path using the client-specific information. the server device is mapped to at least two server names; the server communication circuitry being configured to respond to a connection initiation message indicating a first server name to establish the first encrypted data path without requiring the client-specific information; and the server communication circuitry being configured to respond to a connection initiation message indicating a second server name to establish the second encrypted data path using the client-specific information.