OpenDNSSEC 1.4 (Q4 2012)

• Input and output adapters for AXFR and IXFR
• PIN daemon
• Auditor is deprecated (dependency on Ruby is removed)

OpenDNSSEC 2.0 (H1 2012)

• Rewrite of the Enforcer
  • Algorithm rollover
  • Performance improvements for large numbers of zones
  • Allow KSK and ZSK to be the same key
  • Support multiple key rollover methods
  • Support policy rollover
• Support for passing through unsigned zones

OpenDNSSEC 2.1

• Database input and output adapter
• Dynamic updates
• Unified control interface

OpenDNSSEC 2.X

• Incremental transition from/to NSEC to/from NSEC3
• GOST and ECDSA algorithm
• Inventory and formal codes for all syslog messages
• Offline keys