diff --git a/cmd/syncthing/main.go b/cmd/syncthing/main.go
index 0abc7574..6618a9b9 100644
--- a/cmd/syncthing/main.go
+++ b/cmd/syncthing/main.go
@@ -441,6 +441,14 @@ func syncthingMain() {
 		SessionTicketsDisabled: true,
 		InsecureSkipVerify:     true,
 		MinVersion:             tls.VersionTLS12,
+		CipherSuites: []uint16{
+			tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
+			tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
+			tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
+			tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
+			tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
+			tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
+		},
 	}
 
 	// If the read or write rate should be limited, set up a rate limiter for it.