# TODO

* Support for on-the-fly-signing
* Use BIND10 memory efficient zone structure?
* NSEC3 support propper in the zone structure(s)
* Test all rdata packing with zero rdata -- allowed for dynamic updates
* Ratelimiting?
* NSEC3/NSEC support function for generating NXDOMAIN respsonse?

## Nice to have

* Speed, we can always go faster. A simple reflect server now hits 45/50K qps
* go test; only works correct on my machine
* privatekey.Precompute() when signing?