[troquerre]

Agree with the premise of the article. That's why I'm excited about Handshake (https://handshake.org), it's an experimental new protocol that's trying to shift the root of trust of DNS from CAs to a distributed blockchain. Outside of creating a more secure root for TLS, it allows anyone to own their domain name and makes it very difficult to block access from end-users. It's still very much in the early days of adoption but nextdns.io already supports it which is promising.