Check for TLSA record (DANE)

[J0WI]

DANE combines TLS with DNSSEC (#30) and so it provides the highest level of trust. The fingerprint is stored in a TLSA record.
There are already some test sites for this (e.g. https://www.internet.nl/), so this could also be integrated as a third-party test.

Here are some examples:

$ dig _443._tcp.torproject.org TLSA +short
3 1 1 1599B2352EE910499C0DA1A104575935477C5765CCD10D81F43B50AC 30034C76

$ dig _443._tcp.debian.org TLSA +short
3 1 1 5F33491E2B2D267F7BFF096AD0DCB4AE5A22C0BE19DB0AB6728BED94 2F0719FC