The security of a system should never rely on an attacker not knowing the details of the algorithm or implementation.

https://en.wikipedia.org/wiki/Security_through_obscurity

It is possible to fingerprint a TLS stack using its behaviour that a sysadmin can't change. People knew it was openssl.