Nevertheless,
Knot DNS has includes DNSSEC functionality that could be
separated ;), but I think you included it based on a survey. So it seems
users want "everything but a kitchen sink" kind of software.
Unfortunatelly, not everything is easily separable. Which is the case of
DNSSEC in combination with DDNS.
One more thing, which might please you more than my previous response:
I'm currently working on a separate DNSSEC library designed to be used on
servers and other signing solutions. Maybe, some time in the future, you may
live to see a completely separated DNSSEC signing "thing" by CZ.NIC Labs. :-)
Jan