Re:SSH hacks – a little sanity for remote workers
by kubanczyk on Thursday April 30, 2020 @05:23AM
(#23028994)
RFC7766 "Recursive server (or forwarder) implementations MUST support TCP so that they do not prevent large responses from a TCP-capable server from reaching its TCP-capable clients."
large responses == some DNSSEC, some IPv6