Re: Alt-Svc WGLC

I'd been assuming the alternative service server.  Good point we should be
more explicit.
Perhaps:

Clients MUST NOT use alternative services without strong server
authentication to the alternative using the name of the origin; this
mitigates the attack described in Section 9.2.

(The following paragraph gives an example)

On Wed, Jan 13, 2016 at 10:04 PM, Martin Thomson <martin.thomson@gmail.com>
wrote:

> On 14 January 2016 at 09:42, Erik Nygren <erik@nygren.org> wrote:
> > Clients MUST NOT use alternative services
> > without strong server authentication; this mitigates the attack
> described in
> > Section 9.2.
>
>
> Does this refer to the alternative service server, or the server that
> advertises the alternative service?  That's a major source of
> confusion here.
>