Are you suggesting that the multi6 solution should have a strict
dependency on using TLS or IPSEC?
Certainly not. I'm saying two things:
- if the DNS doesn't work, discover information that would normally be
in the DNS through the TLS or IKE negotiation, and
- the DNS is often insecure, so let the TLS or IKE derived information
override it to increase security
But if TLS/IPsec aren't used, the information is taken from the DNS.