> I have no knowledge of DANE but its reliance on DNSSEC makes me worried that it would be difficult for people to adopt it.

It's not hard to set up DNSSEC as long as your DNS server software supports it and most people don't run their own authorative DNS servers anyway.