Re: I-D ACTION:draft-ietf-secsh-scp-sftp-ssh-uri-00.txt

[Nicolas Williams <Nicolas.Williams%sun.com@localhost>]

On Wed, Aug 13, 2003 at 05:57:17PM -0400, Joel N. Weber II wrote:
> > Then you need to describe this in detail (e.g., SRV RR naming).  And the
> > fact that DNS is often deployed in insecure configurations is definitely
> > something to point out in the security considerations section - that is,
> > if the SRV lookup cannot be done securely then 22 should be used, IMO.
> 
> While we're at it, maybe we should say that if the A lookup can't be
> done securely, then you have to use 127.0.0.1?  :-P

Point taken :)