diff --git a/master/named.conf b/master/named.conf
index 03bb915..2913f23 100644
--- a/master/named.conf
+++ b/master/named.conf
@@ -18,4 +18,5 @@ dnssec-policy "algo13" {
     max-zone-ttl 1d;
     signatures-validity 14d;
     signatures-refresh 7d;
+    nsec3param iterations 10 optout no salt-length 0;
 };