diff --git a/src/config/config.c b/src/config/config.c
index d03fb3b0..45413397 100644
--- a/src/config/config.c
+++ b/src/config/config.c
@@ -497,7 +497,7 @@ void initConfig(struct config *conf)
 	conf->dns.dnssec.h = "Validate DNS replies using DNSSEC?";
 	conf->dns.dnssec.t = CONF_BOOL;
 	conf->dns.dnssec.f = FLAG_RESTART_FTL;
-	conf->dns.dnssec.d.b = true;
+	conf->dns.dnssec.d.b = false;
 
 	conf->dns.interface.k = "dns.interface";
 	conf->dns.interface.h = "Interface to use for DNS (see also dnsmasq.listening.mode) and DHCP (if enabled)";