Roadmap

OpenDNSSEC 2.0 

• Rewrite of the Enforcer
  
  • Performance improvements for large numbers of zones

OpenDNSSEC 2.X

• Enforcer
  
  • Algorithm rollover
  • Allow KSK and ZSK to be the same key
  • Support multiple key rollover methods
  • Support policy rollover
• Signer
  
  • Database input and output adapter
  • Dynamic updates
• General
  • Support for passing through unsigned zones
  • Monitoring & usability improvements
  • GOST and ECDSA algorithm
  • Offline keys
  • Unified control interface
  • Inventory and formal codes for all syslog messages
  • Incremental transition from/to NSEC to/from NSEC3