It sounds like you could be describing a desire for trust stores in operating systems that users and system administrators can manage. Is that the case? Moving

It sounds like you could be describing a desire for trust stores in operating systems that users and system administrators can manage. Is that the case? Moving on past that, I think you've hit the nail on the head. CAs are about having a root for tree of trust. CAA and DANE are about ensuring that. I'm very curious how you imagine an improved, innovative solution to assuring trust! I've seen proposals like Namecoin, which are innovative but fail the test of being improved.