Autour de DANE
http://blog.hansenpartnership.com/dnssec-dane-and-the-failure-of-x-509/