I would verify domain ownership using something other than DNS, and devise something more reliable than CAA records to lock down issuance authority. But I can't say enough how much I think DANE would be a direct step backwards for trustworthiness on the web. We would be immediately worse off in multiple ways. Any argument in favor of DANE has to work around the unreliability, the weak cryptography, and, most importantly, the lack of transparency.