DNS is for service discovery, not identity discovery and routing. I leave the rest of your questions for the standard to be developed. I don’t have all the answers, but am willing to pay people smarter than me to figure it out. Accept this sub thread as the official Request For Comments :)
You own private key. Public key is your identity. Public key could be linked to facebook, twitter, github accounts, etc, so you can easily discover or verify people.