diff --git a/etc/systemd/resolved.conf b/etc/systemd/resolved.conf
index 2cd98a1..72639b3 100644
--- a/etc/systemd/resolved.conf
+++ b/etc/systemd/resolved.conf
@@ -3,4 +3,4 @@
 # Resolve mDNS hostnames via resolved, but leave the rest to Avahi
 MulticastDNS=resolve
 # Enable and enforce DNSSEC
-DNSSEC=true
+DNSSEC=allow-downgrade