> * s7.1 In the last phrase "the hostname of the SSH server": Sometimes
> users specify IP addresses instead of hostnames, and the GSS
> mechanism is expected to deal with it (rightly so). Now, my concern
> is with the use of the word 'hostname' in the case of targets
> specified as network addresses. As written the par seems to imply a
> client ought to do reverse DNS if an IP address is given. So I
> suggest changing "the hostname of the SSH server" to "the given name
> of the SSH server" or something like that.
I believe the existing text is correct. The construction of GSSAPI
host-based service names requires a hostname, not an IP address. Yes,
that means that if the user provides an IP address, the server will need
to reverse-resolve in a secure fashion.
No. I read RFC2743 s4.1 to say that the canonicalizing of the "hostname"
string is the job of the GSS mechanism, and not that of the SSH server
code.
If you agree, then I think a better correction is to just quote the word
"hostname" in the last sentence of s7.1, as was done in rfc2743 s4.1.