diff --git a/config.go b/config.go
index fef6c482..0c995293 100644
--- a/config.go
+++ b/config.go
@@ -236,7 +236,7 @@ func newBConfig() *Config {
 			AdminPort:     8088,
 			EnableFcgi:    false,
 			EnableStdIo:   false,
-			ClientAuth:    tls.VerifyClientCertIfGiven,
+			ClientAuth:    tls.RequireAndVerifyClientCert,
 		},
 		WebConfig: WebConfig{
 			AutoRender:             true,