DNS-based Authentication of Named Entities, using DNSSEC records to bind certificates or keys to domain names.