The System.Security.Authentication.ExtendedProtection.ExtendedProtectionPolicy is enforced only if the client and server supports extended protection.