diff --git a/debian/patches/secure-by-default.patch b/debian/patches/secure-by-default.patch
new file mode 100644
index 0000000..e7a3912
--- /dev/null
+++ b/debian/patches/secure-by-default.patch
@@ -0,0 +1,12 @@
+diff --git a/TelnetV6.c b/TelnetV6.c
+index b139fad..4a68108 100644
+--- a/TelnetV6.c
++++ b/TelnetV6.c
+@@ -428,6 +428,7 @@ int ProcessLine(char * buf, int Port)
+ 		TNC->Hardware = H_TELNET;
+ 		TCP->IPV4 = TRUE;
+ 		strcpy(TCP->CMSServer, "cms.winlink.org");
++		TCP->SecureTelnet = 1;
+ 	}
+ 
+ 	TNC = TNCInfo[Port];