Isn't that exactly what DNSSEC is? Unfortunately not all that many domains are using it today.