diff --git a/NEWS b/NEWS
index 8256d2559e89fb54140122f386552fbc6f325cdc..a183473643dfcd64782dec421aaf0295d4a925cb 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,14 @@
+Knot Resolver 1.3.0 ? (2017-05-??)
+================================
+
+Security
+--------
+- Refactor handling of AD flag and security status of resource records.
+  In some cases it was possible for secure domains to get cached as
+  insecure, even for a TLD, leading to disabled validation.
+  It also fixes answering with non-authoritative data about nameservers.
+
+
 Knot Resolver 1.2.6 (2017-04-24)
 ================================
 
diff --git a/config.mk b/config.mk
index 9418a07f4e51e271d9d4e221f003d3d4d9252cd6..9ba66f9b4fb9c3e630da96654cdc4061f957935e 100644
--- a/config.mk
+++ b/config.mk
@@ -2,7 +2,7 @@
 MAJOR := 1
 MINOR := 2
 PATCH := 6
-EXTRA :=
+EXTRA := -dev
 ABIVER := 3
 BUILDMODE := dynamic
 HARDENING := yes