sounds like we could use this for user attestation.

And be protected from DNS or BGP hijacking