Release Plan

This release plan gives an overview of what to expect in the future.

OpenDNSSEC 2.0

Rewrite of the Enforcer

  • Performance improvements for large numbers of zones

OpenDNSSEC 2.X

Enforcer

  • Algorithm rollover
  • Allow KSK and ZSK to be the same key
  • Support multiple key rollover methods
  • Support policy rollover

Signer

  • Dynamic updates
  • Database input and output adapter

General

  • Support for passing through unsigned zones
  • Monitoring & usability improvements
  • GOST and ECDSA algorithm
  • Offline keys
  • PostgreSQL support
  • Unified control interface
  • Inventory and formal codes for all syslog messages
  • Incremental transition from/to NSEC to/from NSEC3