Comment by asksomeoneelse

But how do you make DNS secure without CAs?