diff --git a/config/basic/net.nix b/config/basic/net.nix
index b779437..a7e1485 100644
--- a/config/basic/net.nix
+++ b/config/basic/net.nix
@@ -25,7 +25,7 @@
   services.resolved = {
     enable = true;
     # man I whish dnssec would be viable to use
-    dnssec = "allow-downgrade";
+    dnssec = "false";
     llmnr = "false";
     extraConfig = ''
       Domains=~.