3 ms·

What you want re public keys in dnssec secured DNS is called Dane. Browsers are slow to implement it though.