HTTPS using certificates signed by DNSSEC is coming. In fact, support for it is already in Chrome (although behind a command line flag). If you want details, s

HTTPS using certificates signed by DNSSEC is coming. In fact, support for it is already in Chrome (although behind a command line flag). If you want details, see: http://www.imperialviolet.org/2010/08/16/dnssectls.html http://www.imperialviolet.org/2010/08/16/dnssectls.html The current holdups are that .com does yet support DNSSEC (it should happen early next year), and that people are still figuring out what form the DNS records should have. At this point, it's likely to be a new (binary) RR type which doesn't have an RRTYPE code assigned yet. I just need to change Chrome to reflect this.