The title pretty much says it. Do the security patches to address the gotofail security issue in multiple Apple products employing SSL change the User Agent string for the respective systems? And, of course, what is the demarcation point between patched systems and unpatched systems with the build number in the UA string? I don't have iDevices lying around to empirically test this, so I'm hoping some of the professionals here know the answer. Ideally, I'd like to be able to mitigate the risk of users hitting an OWA server with unpatched devices over public wireless networks by rejecting unpatched user agents.
Yes, I know this is not foolproof, but I'm trying to protect against ambivalent users, not malicious ones.