> Bottom line, if DANE/TLSA were adopted for HTTPS, it can be made to work also with CDNs as described in this thread. I am not so sanguine. I am not a DNS expert. I know many, some of whom also work at my employer and who have not commented on this.