RFC 3958:Domain-Based Application Service Location...
RFC-Ref

query


Click on the red underlined text to get to the source

... processing rules. In the case of an "S" flag, the REPLACEMENT field is used as the target of a DNS query for SRV RRs, ...
... An application client first queries for the NAPTR RRs for the domain ...
... domain of a named application service. The first DNS query is for the NAPTR RRs ...


... application service location is only as good as the security of the DNS queries along the way. If any of them is compromised, bogus NAPTR and SRV records ...



Google
Web
RFC-Ref