I'm waiting for the widespread adoption of DNSSEC so we can just start adding TLSA records with the public key fingerprint. Yes, it means you have to trust who

I'm waiting for the widespread adoption of DNSSEC so we can just start adding TLSA records with the public key fingerprint. Yes, it means you have to trust whoever has access to create DNS records, but you already have to trust them.