Mark Nottingham writes: > Consensus around this text was particularly hard-won; unless there > is a very good reason to make a change, I'd rather not risk falling > into that rat-hole again. And, I should add in case it helps at all, that the W3C TAG was involved in the extensive discussions which resulted in this text. I also think the fact that it is where it is, in 3.1.1.5, does matter. But recapitulating and/or referencing it in the Security Considerations section would of course be fine, and indeed probably desireable. ht -- Henry S. Thompson, School of Informatics, University of Edinburgh 10 Crichton Street, Edinburgh EH8 9AB, SCOTLAND -- (44) 131 650-4440 Fax: (44) 131 650-4587, e-mail: ht@xxxxxxxxxxxx URL: http://www.ltg.ed.ac.uk/~ht/ [mail from me _always_ has a .sig like this -- mail without it is forged spam]