Hacker News Reader

Why do they need a special extension though? What's wrong with DNS?

Signed exchanges are an extension to digital certificates, such as used for TLS. This is independent of DNS.