D.J. Bernstein proposes an almost zero-effort DNSSEC alternative (Presentation)

Generally speaking, digitally signing DNS *packets* would be helpful even if there was no public key infrastructure, and the idea of encoding the keys in the server names is creative.

Hacker News | D.J. Bernstein proposes an almost zero-effort DNSSEC alternative (Presentation)