Web of Trust is a much better way to fight impersonation than DNS alias for the majority of identities, imo.

There could be some exceptions, when some DNS domains are publicly known and recognizable, but that's not the general case.