Mirror hardening - complementing RFC 29