[varenc]

HTTPS certificates should do exactly this.

[drew-y]

They should. And sort of already do. Though, I wonder how difficult it is to register with some certificate issuers under a fraudulent name.