title: node.js SSL encryption without authentication
body: <p>When a client connects to a node.js SSL server and is not authenticated, i.e.:</p>
  
  <ul>
  <li>server doesn't require it, i.e. uses <code>requestCert: false</code> </li>
  <li>or client certificate is "wrong", i.e. the <code>secureConnection</code> event is fired on the SSL server but <code>Cleartextstream.authorized</code> is <code>false</code></li>
  </ul>
  
  <p>Is the communication between the client and the server still encrypted (authentication and confidentiality being two different things)?</p>
  
  <p>Another way to put it: does node.js SSL server falls back as a normal/unencrypted TCP server if there are authentication problems, but still fires a <code>secureConnection</code> event?</p>