diff --git a/cmd/sdns-proxy/sdns-proxy.go b/cmd/sdns-proxy/sdns-proxy.go
index 05c5279..c4e5976 100644
--- a/cmd/sdns-proxy/sdns-proxy.go
+++ b/cmd/sdns-proxy/sdns-proxy.go
@@ -61,7 +61,7 @@ func (q *QueryCmd) Run() error {
 	msg.SetQuestion(dns.Fqdn(q.DomainName), qTypeUint)
 	msg.Id = dns.Id()
 	msg.RecursionDesired = true
-	msg.SetEdns0(4096, q.DNSSEC)
+	msg.SetEdns0(1232, q.DNSSEC)
 
 	logger.Debug("Sending DNS query: ID=%d, Question=%s %s", msg.Id, q.DomainName, q.QueryType)
 	_, recvMsg, err := dnsClient.Query(msg)
diff --git a/common/dnssec/walker_iterative.go b/common/dnssec/walker_iterative.go
index a944638..e239e97 100644
--- a/common/dnssec/walker_iterative.go
+++ b/common/dnssec/walker_iterative.go
@@ -29,7 +29,7 @@ func (w *iterativeWalker) resetStats()            { w.st = ValidationStats{} }
 func (w *iterativeWalker) exchange(server, name string, qtype uint16) (*dns.Msg, error) {
 	m := new(dns.Msg)
 	m.SetQuestion(dns.Fqdn(name), qtype)
-	m.SetEdns0(4096, true)
+	m.SetEdns0(1232, true)
 	m.RecursionDesired = false
 
 	if b, err := m.Pack(); err == nil {
diff --git a/common/dnssec/walker_trust.go b/common/dnssec/walker_trust.go
index 4a5d742..91b7a35 100644
--- a/common/dnssec/walker_trust.go
+++ b/common/dnssec/walker_trust.go
@@ -24,7 +24,7 @@ func (w *trustWalker) ask(name string, qtype uint16) (*dns.Msg, error) {
 	m.SetQuestion(dns.Fqdn(name), qtype)
 	m.Id = dns.Id()
 	m.RecursionDesired = true
-	m.SetEdns0(4096, true)
+	m.SetEdns0(1232, true)
 
 	if b, err := m.Pack(); err == nil {
 		w.st.BytesSent += len(b)
diff --git a/internal/qol/measurement.go b/internal/qol/measurement.go
index fbdbf96..a4a918e 100644
--- a/internal/qol/measurement.go
+++ b/internal/qol/measurement.go
@@ -202,7 +202,7 @@ func (r *MeasurementRunner) performQuery(dnsClient client.DNSClient, domain, ups
 	msg.Id = dns.Id()
 	msg.RecursionDesired = true
 	msg.SetQuestion(dns.Fqdn(domain), qType)
-	msg.SetEdns0(4096, r.config.DNSSEC)
+	msg.SetEdns0(1232, r.config.DNSSEC)
 
 	start := time.Now()
 	metric.Timestamp = start