diff --git a/roles/dns_intern/templates/recursor.conf.j2 b/roles/dns_intern/templates/recursor.conf.j2
index adf37de..da4dc83 100644
--- a/roles/dns_intern/templates/recursor.conf.j2
+++ b/roles/dns_intern/templates/recursor.conf.j2
@@ -11,9 +11,9 @@
 config-dir=/etc/powerdns
 
 #################################
-# dnssec	DNSSEC mode: off/process-no-validate (default)/process/log-fail/validate
+# dnssec	DNSSEC mode: off/process-no-validate/process (default)/log-fail/validate
 #
-# dnssec=process-no-validate
+# dnssec=process
 dnssec=off
 
 #################################