diff --git a/doc/Changelog b/doc/Changelog
index 33450ab93..5e6d921fc 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -10,6 +10,7 @@
 	  Thanks to Xiang Li, from NISL Lab, Tsinghua University.
 	- Set default for harden-unknown-additional to no. So that it does
 	  not hamper future protocol developments.
+	- Fix test for new default.
 
 18 January 2023: Wouter
 	- Fix not following cleared RD flags potentially enables amplification
diff --git a/testdata/val_any.rpl b/testdata/val_any.rpl
index 7d94094ce..ee249ffb6 100644
--- a/testdata/val_any.rpl
+++ b/testdata/val_any.rpl
@@ -8,6 +8,7 @@ server:
 	fake-sha1: yes
 	trust-anchor-signaling: no
 	rrset-roundrobin: no
+	harden-unknown-additional: yes
 
 stub-zone:
 	name: "."
diff --git a/testdata/val_any_dname.rpl b/testdata/val_any_dname.rpl
index ff06de1eb..005d29606 100644
--- a/testdata/val_any_dname.rpl
+++ b/testdata/val_any_dname.rpl
@@ -8,7 +8,6 @@ server:
 	fake-sha1: yes
 	trust-anchor-signaling: no
 	rrset-roundrobin: no
-	; this allows the SRV entry in the answer packet additional section.
 	harden-unknown-additional: no
 
 stub-zone:
diff --git a/testdata/val_any_negcache.rpl b/testdata/val_any_negcache.rpl
index 1f04dd885..77aacba8c 100644
--- a/testdata/val_any_negcache.rpl
+++ b/testdata/val_any_negcache.rpl
@@ -9,6 +9,7 @@ server:
 	trust-anchor-signaling: no
 	rrset-roundrobin: no
 	aggressive-nsec: yes
+	harden-unknown-additional: yes
 
 stub-zone:
 	name: "."