diff --git a/etc/systemd/network/10-ether.network b/etc/systemd/network/10-ether.network
index a05c27da..699103fd 100644
--- a/etc/systemd/network/10-ether.network
+++ b/etc/systemd/network/10-ether.network
@@ -30,12 +30,8 @@ DNS=
 DNS=::1
 DNS=127.0.0.1
 DNS=127.0.0.53
-#DNSSEC=true
-#DNSSEC=allow-downgrade
-DNSSEC=false
-#DNSOverTLS=true
-#DNSOverTLS=opportunistic
-DNSOverTLS=false
+DNSSEC=true
+DNSOverTLS=opportunistic
 # Search domains
 Domains=.
 # Enable systemd-timesyncd with `timedatectl set-ntp true`, may be specified
diff --git a/etc/systemd/network/10-wlan.network b/etc/systemd/network/10-wlan.network
index 83ffa625..ad326a66 100644
--- a/etc/systemd/network/10-wlan.network
+++ b/etc/systemd/network/10-wlan.network
@@ -28,11 +28,8 @@ MulticastDNS=true
 # Windows
 LLMNR=true
 # systemd-resolved configuration
-#DNSSEC=true
-#DNSSEC=allow-downgrade
+DNSSEC=true
 DNSSEC=false
-#DNSOverTLS=true
-#DNSOverTLS=opportunistic
-DNSOverTLS=false
+DNSOverTLS=opportunistic
 # Search domains
 Domains=.