Now that we're done conflating encryption with certificates and cheapened the meaning of certificate trust, what are we going to use to establish which entity a

Now that we're done conflating encryption with certificates and cheapened the meaning of certificate trust, what are we going to use to establish which entity actually controls the domain name we are pointed to?