Disable the enforce flag by default
diff --git a/include/mbedtls/ssl.h b/include/mbedtls/ssl.h
index 38546ac..bc42d54 100644
--- a/include/mbedtls/ssl.h
+++ b/include/mbedtls/ssl.h
@@ -2829,7 +2829,7 @@
/**
* \brief Enable or disable Extended Master Secret enforcing.
- * (Default: MBEDTLS_SSL_EXTENDED_MS_ENFORCE_ENABLED)
+ * (Default: MBEDTLS_SSL_EXTENDED_MS_ENFORCE_DISABLED)
*
* \note This enforces the peer to use the Extended Master Secret
* extension, if the option is enabled and the peer doesn't