diff --git a/autotls/autotls.go b/autotls/autotls.go
index 4bbc229..77c7b15 100644
--- a/autotls/autotls.go
+++ b/autotls/autotls.go
@@ -229,6 +229,7 @@ func (m *Manager) TLSConfig(fallbackHostname dns.Domain, fallbackNoSNI, fallback
 		GetCertificate: func(hello *tls.ClientHelloInfo) (*tls.Certificate, error) {
 			return m.loggingGetCertificate(hello, fallbackHostname, fallbackNoSNI, fallbackUnknownSNI)
 		},
+		SessionTicketsDisabled: true,
 	}
 }
 
diff --git a/mox-/config.go b/mox-/config.go
index b94594c..a238f07 100644
--- a/mox-/config.go
+++ b/mox-/config.go
@@ -1920,7 +1920,8 @@ func loadTLSKeyCerts(configFile, kind string, ctls *config.TLS) error {
 		certs = append(certs, cert)
 	}
 	ctls.Config = &tls.Config{
-		Certificates: certs,
+		Certificates:           certs,
+		SessionTicketsDisabled: true,
 	}
 	ctls.ConfigFallback = ctls.Config
 	return nil