I am trying to devise a way to find side-channels that reveal exact TLS library (and its version) running on the remote server by adopting similar approach to JavaScript Template Attacks
However, if there exist an explicit channel, then I might not dive into this problem.
Are TLS libraries reveal their implementation information (I don't mean the protocol version) through the messages or during the key exchange?