[niftich]

Also, domain validated certificates issued by CAs work the same way: among a few other requirements, you publish a value provided by them at a specific relative URL on your domain.