diff --git a/librewolf.cfg b/librewolf.cfg
index eee5524..2cd6532 100644
--- a/librewolf.cfg
+++ b/librewolf.cfg
@@ -1255,10 +1255,11 @@ defaultPref("network.dns.localDomains", "librefox.com");
 // https://github.com/pyllyukko/user.js/pull/206#issuecomment-280229645
 lockPref("security.tls.version.fallback-limit", 3);
 
-// Pref : Only allow TLS 1.[0-3]
+// Pref : Only allow TLS 1.2+
 // http://kb.mozillazine.org/Security.tls.version.*
-lockPref("security.tls.version.min", 2);
+lockPref("security.tls.version.min", 3);
 
+// enforce TLS 1.0 and 1.1 downgrades as session only
 lockPref("security.tls.version.enable-deprecated", false);
 
 // Pref : Enfore Public Key Pinning