Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.



  • Input and output adapters for AXFR and IXFR
  • PIN daemon
  • Auditor is deprecated (dependency on Ruby is removed)

OpenDNSSEC 2.0 

  • Rewrite of the EnforcerAlgorithm rollover
    • Performance improvements for large numbers of zones


  • Enforcer
    • Algorithm rollover
    • Allow KSK and ZSK to be the same key
    • Support multiple key rollover methods
    • Support policy rollover
  • Support for passing through unsigned zones

OpenDNSSEC 2.1

  • Signer
    • Database input and output adapter
    • Dynamic updates
  • General
    • Support for passing through unsigned zones
    • Unified control interface


    • Incremental transition from/to NSEC to/from NSEC3
    • GOST and ECDSA algorithm
    • Inventory and formal codes for all syslog messages
    • Offline keys