Plugins/extensions are available now for both Chrome and Firefox that provide a visual indicator in the address bar: http://www.internetsociety.org/deploy360/r

Plugins/extensions are available now for both Chrome and Firefox that provide a visual indicator in the address bar: http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-google-chrome/ http://www.internetsociety.org/deploy360/resources/how-to-ad... http://www.internetsociety.org/deploy360/resources/how-to-add-dnssec-support-to-mozilla-firefox/ http://www.internetsociety.org/deploy360/resources/how-to-ad... But, to your point, these are not built-in and require a user to actually install the extensions. And of course, a user can ignore the key icon (as some ignore the lock-in and SSL/TLS popups).