diff --git a/dnsupdate_tlsa b/dnsupdate_tlsa
index 8577c78..25d9fde 100755
--- a/dnsupdate_tlsa
+++ b/dnsupdate_tlsa
@@ -32,7 +32,7 @@ use constant END_FOUND =>3;
 my $port = 53;
 my $ttl = 3600;
 my $help = 0;
-my $tsigalgo = 'hmac-md5';
+my $tsigalgo = 'hmac-sha256';
 my ($oldcert, $cert, $tsigname, $tsigkey, $server, $verbose, $tsig);
 my ($old_rr, $new_rr, $update, $resolver, $reply);
 
@@ -203,7 +203,7 @@ Base64 encoding of the TSIG key.
 
 =item B<-tsigalgo>
 
-Algorithm of the TSGI key, default hmac-md5.
+Algorithm of the TSGI key, default hmac-sha256.
 
 =item B<-oldcert>