diff --git a/lib/krb5/auth_context.c b/lib/krb5/auth_context.c
index 31b9f908b..b5d2dd2d0 100644
--- a/lib/krb5/auth_context.c
+++ b/lib/krb5/auth_context.c
@@ -56,13 +56,8 @@ krb5_auth_con_init(krb5_context context,
     memset (p->authenticator, 0, sizeof(*p->authenticator));
     p->flags = KRB5_AUTH_CONTEXT_DO_TIME;
 
-    /*
-     * These choices use checksum and encryption methods from the
-     * spec.  Hopefully they are supported by all implementations.
-     */
-
-    p->cksumtype = CKSUMTYPE_RSA_MD5_DES;
-    p->enctype   = ETYPE_DES_CBC_MD5;
+    p->cksumtype = 0; /* CKSUMTYPE_RSA_MD5_DES */
+    p->enctype   = 0; /* ETYPE_DES_CBC_MD5 */
     p->local_address = NULL;
     p->remote_address = NULL;
     *auth_context = p;