DNSSEC DANE & DNSCrypt(DoH) - Trust but Verify
DNSSEC DANE and DNSCrypt - The Internet hasn't seen this kind of improvement since Jon Postel's original DNS RFCs. DNSSEC brings authentication of information served by authoritative servers thus the dawn of the believable Internet. From this, the emergence of DANE or DNS-based Authentication of Named Entities. This adds confidentiality to believability. Wrap all that in DNSCrypt and you have a confidential, verifiable and decentralized naming service. While not all Internet infrastructure has left the era of blind trust, the names we depend on are now things we can verify.