The document contains a number of references to using server certificates for "hostname verification". I think that this
 is restrictive as the certificate authenticates the server and not just the name of the remote host that gives access 
to the server. I think that these statements could be rephrased to recognise the possibility that the server's address 
may be dynamic.

RFC 2818 allows for this possibility i.e. "If the client has external information as to the expected identity of the 
server, the hostname check MAY be omitted. (For instance, a  client may be connecting to a machine whose address and 
hostname are dynamic but the client knows the certificate that the server will present.)"