You can do all kinds of nice DANE-like things. For example keys for SSH, IPSec, OpenVPN, NFS, etc. "We already have something for web browsers" isn't a big coun

You can do all kinds of nice DANE-like things. For example keys for SSH, IPSec, OpenVPN, NFS, etc. "We already have something for web browsers" isn't a big counterargument. I agree they should add confidentiality. That shouldn't be too hard since all the key handling is already taken care of.