[tokenizerrr]

That ship has sailed years ago. And now we have EV certificates to deal with that problem.

[schoen]

For the time being, it's DNS registrars who define who is allowed particular domain names, and DV CAs just try to draw the connection between what the registrars have said and the server you're visiting at a particular moment.