Imagine a world where the (signed) DNS response contains a root hash of the contents of the page you are visiting. If the page is dynamic, not everything can b

Imagine a world where the (signed) DNS response contains a root hash of the contents of the page you are visiting. If the page is dynamic, not everything can be linked into that hash, but paired with CSP you can 100% guarantee that any code that executes is coming from a trusted source. Then there's technologies like DNSLink for IPFS that obviate the need for this altogether, since the DNS response just contains the hash of what you want, and you ask IPFS for that hash, and anyone who's got it can deliver it to you. https://docs.ipfs.io/concepts/dnslink/ https://docs.ipfs.io/concepts/dnslink/