Yeah, we need DANE [1] or something like it in browsers. AFAIK DANE failed because DNS servers (such as the DNS servers of ISP's) sometimes failed to properly

Yeah, we need DANE [1] or something like it in browsers. AFAIK DANE failed because DNS servers (such as the DNS servers of ISP's) sometimes failed to properly return the record types DANE used. [1] https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Na...