diff --git a/suricata.yaml.in b/suricata.yaml.in
index e845c105afc..9cce5844f01 100644
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@@ -931,7 +931,7 @@ app-layer:
       #enabled: yes
     ssh:
       enabled: yes
-      #hassh: yes
+      # hassh: no
 
       # What to do when the encrypted communications start:
       # - bypass:  stop processing this flow as much as possible.