There's also the easy way which avoids the problem almost altogether: let the only entity with the legal power to tell who holds which domain also do so cryptog

There's also the easy way which avoids the problem almost altogether: let the only entity with the legal power to tell who holds which domain also do so cryptographically. The infrastructure is already in place. Do a good deed and publish your records today, if you haven't already.