Support for DNS authentication of Names Entities
At present their is a draft Internet standard for DNS authentication of Names Entities (DANE) which will provide a framework for associating Certificates with Domain Names. See link below
In a similar vein the University of Amsterdam and NLnet have created an Extended DNSSEC validator
(see https://os3sec.org/ )
which has resulted in the "libunbound" being created which can integrated into applications.
libunbound is available here
Can IllumOS be readied for the inclusion of this technology?