diff --git a/etc/resolv.conf b/etc/resolv.conf
index 7f4a4127..bd6922a3 100644
--- a/etc/resolv.conf
+++ b/etc/resolv.conf
@@ -9,7 +9,7 @@
 
 # trust-ad option is required from glibc2.31+ to tell everything to trust
 # AD/DNSSEC in case there is a localhost DNS server that validates it
-options edns0 single-request-reopen #trust-ad
+options edns0 single-request-reopen trust-ad
 
 # I am not entirely sure local is valid to use here. And this has a bad
 # habit of flooding nameserver with names I don't want it to know about