Those are public web browsers and not really relevant to the matter here. They do not, as far as I know, implement DANE and if they did they would likely not tr

Those are public web browsers and not really relevant to the matter here. They do not, as far as I know, implement DANE and if they did they would likely not trust 512-bit RSA certificates either. (Who knows? That might even have been a good way to bootstrap a good policy baseline, had they supported it.)