This release plan gives an overview of what to expect in the future.

OpenDNSSEC 2.0

Rewrite of the Enforcer

• Performance improvements for large numbers of zones

OpenDNSSEC 2.X

Enforcer

• Algorithm rollover
• Allow KSK and ZSK to be the same key
• Support multiple key rollover methods
• Support policy rollover

Signer

• Dynamic updates
• Database input and output adapter

General

• Support for passing through unsigned zones
• Unified control interface

• Incremental transition from/to NSEC to/from NSEC3
• GOST and ECDSA algorithm
• Inventory and formal codes for all syslog messages
• Offline keys