You never want to hardcode anything like that. You use DNSSEC instead. Right now the adoption is slow, but things are speeding up. With DNSSEC you would be able

You never want to hardcode anything like that. You use DNSSEC instead. Right now the adoption is slow, but things are speeding up. With DNSSEC you would be able to authenticate that you are indeed getting the proper DNS reponse from your name servers. Combine that with SSL and you could be pretty sure that you are indeed talking to the right Google. Now we just need some form of fingerprinting like SSH has.