DHCP query/reply using IP directed-broadcast address

hi,
is there any server implementation that replies to client requests using the
'subnet directed-broadcast' rather than the limited ip broadcast (i.e all
1s)?  i believe linux and unix implementation do the latter, but the RFC
does not preclude sending the former..

besides DHCP, are there any other protocols that use this subnet
directed-broadcast address while sending out IP packets?

appreciate any inputs on this.

thanks,
-ramkumar