I believe DANE addresses this (and other things, which is what makes it complicated).