diff --git a/rootfs/etc/confd/templates/config.yaml.tmpl b/rootfs/etc/confd/templates/config.yaml.tmpl
index b25e4f0..3f71fe7 100644
--- a/rootfs/etc/confd/templates/config.yaml.tmpl
+++ b/rootfs/etc/confd/templates/config.yaml.tmpl
@@ -362,7 +362,7 @@ bridge:
             # Minimum level that the bridge should accept for incoming Matrix messages.
             send: unverified
             # Minimum level that the bridge should require for accepting key requests.
-            share: cross-untrusted
+            share: cross-signed-tofu
         # Options for Megolm room key rotation. These options allow you to
         # configure the m.room.encryption event content. See:
         # https://spec.matrix.org/v1.3/client-server-api/#mroomencryption for