Could we just publish (and cache!) TXT records at the appropriate-level domains? E.g.:
host -t TXT github.io.
etld_depth=2 host -t TXT github.io.
etld_depth=2Why would that be a bad thing? What happens under badguy.com is badguy.com's business, is it not?
Is it any different than setting cookie scoping rules?