I'm not a blockchain expert (or DNS, for that matter), but my reckoning is that alternatives to public-key infrastructure involving such things as identity-based and attribute-based encryption are a more promising way to get rid of CAs. Tackle it at the level of the trapdoor function, as this is, at least, mathematically robust. The mathematics of networks is less so.