diff --git a/fedora-minimal/sys-net.sh b/fedora-minimal/sys-net.sh
index 9d9c153..93186da 100644
--- a/fedora-minimal/sys-net.sh
+++ b/fedora-minimal/sys-net.sh
@@ -7,8 +7,8 @@ rm -rf /etc/chrony.conf
 curl --proxy http://127.0.0.1:8082 https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.conf -o /etc/chrony.conf
 systemctl enable --now chronyd
 
-#Force DNSSEC
-sed -i 's/#DNSSEC=no/DNSSEC=yes/g' /etc/systemd/resolved.conf
+#Switch DNSSEC to default / allow-downgrade, as there is no guaranteee that the DNS server obtained via DHCP supports DNSSEC.
+sed -i 's/DNSSEC=yes/#DNSSEC=false/g' /etc/systemd/resolved.conf
 systemctl restart systemd-resolved
 
 #Theming