A method for deactivating Server Name Indication, SNI, encryption in a telecommunication network, wherein said telecommunication network comprises a Domain Name System, DNS, server, said method comprising the steps of receiving, by said DNS server, from a User Equipment, UE, a DNS query comprising a Domain Name to be converted to an Internet Protocol, IP, address, determining, by said DNS server, that SNI encryption is to be deactivated for subsequent traffic associated with said Domain Name, forwarding, by said DNS server, said DNS query to an external DNS server, wherein said DNS query comprises said Domain Name and a request for deactivating SNI encryption, receiving, by said DNS server, from said external DNS server, a DNS answer, wherein said DNS answer comprises said converted IP address and wherein said DNS answer is free from encryption keys for encrypting SNI and forwarding, by said DNS server, said DNS answer comprising said converted IP address to said UE, wherein said DNS answer is free from encryption keys such that said UE is not able to encrypt said SNI in said subsequent traffic.