diff --git a/internal/tls/client.go b/internal/tls/client.go
index 63d9e50..76f8be9 100644
--- a/internal/tls/client.go
+++ b/internal/tls/client.go
@@ -9,7 +9,7 @@ import (
 )
 
 func NewClient(options ...tls_client.HttpClientOption) tls_client.HttpClient {
-	options = append([]tls_client.HttpClientOption{tls_client.WithClientProfile(clientProfile)}, options...)
+	options = append([]tls_client.HttpClientOption{tls_client.WithClientProfile(clientProfile), tls_client.WithRandomTLSExtensionOrder()}, options...)
 	client, err := tls_client.NewHttpClient(tls_client.NewNoopLogger(), options...)
 	if err != nil {
 		panic(fmt.Errorf("failed to create new tls http client: %w", err))