diff --git a/src/net/tls.c b/src/net/tls.c
index a645ad675..0b23c9281 100644
--- a/src/net/tls.c
+++ b/src/net/tls.c
@@ -2844,6 +2844,13 @@ static int tls_new_session_ticket ( struct tls_connection *tls,
 	} __attribute__ (( packed )) *new_session_ticket = data;
 	size_t ticket_len;
 
+	/* Ignore as-yet unsupported session tickets */
+	if ( tls_version ( tls, TLS_VERSION_TLS_1_3 ) ) {
+		DBGC ( tls, "TLS %p ignoring unsupported New Session Ticket\n",
+		       tls );
+		return 0;
+	}
+
 	/* Parse header */
 	if ( sizeof ( *new_session_ticket ) > len ) {
 		DBGC ( tls, "TLS %p received underlength New Session Ticket\n",