I've looked it up for you. "IIRC it just should look like normal TLS traffic." and "because basically everything does it" was correct.

"/* Browsers use the TLS hostname extension, so we should too. */"