There's DANE [1], which uses DNSSEC to authenticate TLS certificates. Chrome supports (or at least supported) something very similar but Chome-specific [2]. The

There's DANE [1], which uses DNSSEC to authenticate TLS certificates. Chrome supports (or at least supported) something very similar but Chome-specific [2]. The code to support DANE in Chrome apparently exists but I don't know if it's actually available to use. [3] 1. http://datatracker.ietf.org/doc/rfc6698/ http://datatracker.ietf.org/doc/rfc6698/ 2. http://www.imperialviolet.org/2011/06/16/dnssecchrome.html http://www.imperialviolet.org/2011/06/16/dnssecchrome.html 3. http://www.imperialviolet.org/2012/10/20/dane-stapled-certificates.html http://www.imperialviolet.org/2012/10/20/dane-stapled-certif...