@raphael IPNS shouldn't rely on DNS (maybe they started to use gateways to speed it up? I don't know).
There are ENS deployments on layer 2, in near future they can become very cheap, but you're right, it is difficult to use without relying on trusted parties.
My preferred solution is FEP-ef61 where we're piggybacking on DNS but the ultimate authority resides in cryptographic identity.