X-Git-Url: https://git.distorted.org.uk/u/mdw/putty/blobdiff_plain/70c0cbe19796bba2b2266e42477f0ce3bf19386a..bccbeb7195c0a1b8bbc8a92f0c5f6e696c08cd8d:/sshdss.c

diff --git a/sshdss.c b/sshdss.c
index 22992fea..7c95d11b 100644
--- a/sshdss.c
+++ b/sshdss.c
@@ -231,14 +231,14 @@ static int dss_verifysig(void *key, char *sig, int siglen,
 #endif
     /*
      * Commercial SSH (2.0.13) and OpenSSH disagree over the format
-     * of a DSA signature. OpenSSH is in line with the IETF drafts:
+     * of a DSA signature. OpenSSH is in line with RFC 4253:
      * it uses a string "ssh-dss", followed by a 40-byte string
      * containing two 160-bit integers end-to-end. Commercial SSH
      * can't be bothered with the header bit, and considers a DSA
      * signature blob to be _just_ the 40-byte string containing
      * the two 160-bit integers. We tell them apart by measuring
      * the length: length 40 means the commercial-SSH bug, anything
-     * else is assumed to be IETF-compliant.
+     * else is assumed to be RFC-compliant.
      */
     if (siglen != 40) {		       /* bug not present; read admin fields */
 	getstring(&sig, &siglen, &p, &slen);