I just got a response from my feedback: "Your request is possible with the existing APIs. Developers can disable certain cipher suites by explicitly specifying the ones they are willing to support using sec_protocol_options_append_tls_ciphersuite to add all the cipher suites they want to support. All others will not be supported." It is FB13755719 and now i am very confused since it was my understanding that sec_protocol_options_append_tls_ciphersuite only allows adding. Any ideas?