Even with DNS, the set of locators may still be exchanged, in which case, DNS reverse-forward lookup should be used to verify the set.
Yes, that is noid, i think
No cryptographic technology should be involved only to extend valunerability by DoS.