ZONEMD support

[MK796]

Any plans to implement that like Knot does? Knot automatically and dynamically computes and publishes ZONEMD records.

Edit: almost forgot to tell you that, I really really like your software! DNS server management was never that easy! Technitium is for two years now my go to software. Both as recursive as well as authoritative nameservers.

Cheers

Marvin

[ShreyasZare]

Thanks for asking and compliments. Yes, there is plan to add support for ZONEMD records in primary zone but it will take some time and will be taken up when more DNSSEC related features are planned to be implemented.

[MK796]

Thank you for your answer and you're welcome! Would you concretely tell me some of those to be planned dnssec features? Just if you have specific ideas.

[ShreyasZare]

Sure, the main planned feature is multi-signer support to help migrating to/from a different DNS provider without going insecure. The other significant feature is support for online signing with "white lies" which will allow zones to have dynamic record types that get signed on the fly. There are also some small things planned to improve existing implementation.