diff --git a/include/mbedtls/ssl.h b/include/mbedtls/ssl.h
index 38546ac..bc42d54 100644
--- a/include/mbedtls/ssl.h
+++ b/include/mbedtls/ssl.h
@@ -2829,7 +2829,7 @@
 
 /**
  * \brief           Enable or disable Extended Master Secret enforcing.
- *                  (Default: MBEDTLS_SSL_EXTENDED_MS_ENFORCE_ENABLED)
+ *                  (Default: MBEDTLS_SSL_EXTENDED_MS_ENFORCE_DISABLED)
  *
  * \note            This enforces the peer to use the Extended Master Secret
  *                  extension, if the option is enabled and the peer doesn't