diff --git a/unbound.conf b/unbound.conf
index d063c76..7065b4d 100644
--- a/unbound.conf
+++ b/unbound.conf
@@ -4,6 +4,7 @@ server:
     tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
     prefetch: yes
     prefetch-key: yes
+    qname-minimisation-strict: yes
 
 forward-zone:
     name: "."