diff --git a/lib/ssl/sslsock.c b/lib/ssl/sslsock.c
--- a/lib/ssl/sslsock.c
+++ b/lib/ssl/sslsock.c
@@ -72,17 +72,17 @@ static sslOptions ssl_defaults = {
     PR_FALSE,
     /* v2CompatibleHello  */ /* now defaults to off in NSS 3.13 */
     PR_TRUE,                 /* detectRollBack     */
     PR_FALSE,                /* noStepDown         */
     PR_FALSE,                /* bypassPKCS11       */
     PR_FALSE,                /* noLocks            */
     PR_FALSE,                /* enableSessionTickets */
     PR_FALSE,                /* enableDeflate      */
-    2,                       /* enableRenegotiation (default: requires extension) */
+    3,                       /* enableRenegotiation (default: requires extension) */
     PR_FALSE,                /* requireSafeNegotiation */
     PR_FALSE,                /* enableFalseStart   */
     PR_TRUE,                 /* cbcRandomIV        */
     PR_FALSE,                /* enableOCSPStapling */
     PR_TRUE,                 /* enableNPN          */
     PR_FALSE,                /* enableALPN         */
     PR_TRUE,                 /* reuseServerECDHEKey */
     PR_FALSE,                /* enableFallbackSCSV */