There’s CNS as an initiative to decentralize name resolution, and when the local HTTP Proxy integrates with CNS, that would be an e2e decentralized solution.
This requires additional software to be installed on a user’s computer though and we still need to cater for the scenario of a user encountering a Dapp on the IC without any pre-installed software. I think in the long run, having native browser integrations will be the best solution, but we’re probably quite a bit away from that right now.
For CS/SSL, there’s DANE, which would work very well with CNS, but this would require browsers to support it.