Good catch. I had a mistake here. It should have referred to the DST.ADDRESS and DST.PORT sent by the SOCKS client during the handshake -- these are typically unspecified, and entirely optional for the server to respect. I clarified the comment. No TODO needed I think.