This RFC was proposed in 2012. It provides a simple way to place TLS server certs in DNS, in addition to or even in place of usual TLS certificate negotiation.

This RFC was proposed in 2012. It provides a simple way to place TLS server certs in DNS, in addition to or even in place of usual TLS certificate negotiation. In theory, it lets us even remove the TLS chain of trust in favor of the one provided by DNSSEC. However, it is obviously dependent on DNSSEC, and as the latter isn't quite ubiquitous yet, DANE cannot be widely deployed.