diff --git a/Cargo.lock b/Cargo.lock
index c0f663d..2e6ef45 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -360,7 +360,7 @@ dependencies = [
 [[package]]
 name = "domain"
 version = "0.10.3"
-source = "git+https://github.com/NLnetLabs/domain?branch=sortedrecords-zonemd-remove-replace-plus-pr444#a98182b37ef5bf2ea213b5e6d9f5f255f60caa77"
+source = "git+https://github.com/NLnetLabs/domain?branch=initial-nsec3-generation#4c96f947d10df353151859cf396282c22a0e2416"
 dependencies = [
  "arc-swap",
  "bytes",
diff --git a/Cargo.toml b/Cargo.toml
index 634ee84..191e1c5 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -20,7 +20,7 @@ ring = ["domain/ring"]
 bytes  = { version = "1.1", default-features = false }
 chrono = "0.4.38"
 clap = { version = "4.3.4", features = ["cargo", "derive"] }
-domain = { git = "https://github.com/NLnetLabs/domain", branch = "sortedrecords-zonemd-remove-replace-plus-pr444", features = [
+domain = { git = "https://github.com/NLnetLabs/domain", branch = "initial-nsec3-generation", features = [
     "bytes",
     "net",
     "openssl",
@@ -53,7 +53,7 @@ bimap = "0.6.3"
 
 [dev-dependencies]
 const_format = " 0.2.33"
-domain = { version = "*", git = "https://github.com/NLnetLabs/domain.git", branch = "sortedrecords-zonemd-remove-replace-plus-pr444", features = [
+domain = { version = "*", git = "https://github.com/NLnetLabs/domain.git", branch = "initial-nsec3-generation", features = [
     "unstable-stelline",
 ] }
 pretty_assertions = "1.4.1"