There are servers that do not support extended master secret in TLSv1.2 There are servers that support it There are servers that require it It would be very nice to add checks for this