RE: i037: Replace QName's with anyURI

> I kind of agree...get rid of all three or keep all three :)

I dunno.  It doesn't seem to be unreasonable to say "at least don't
make it worse."  That follows section 6 of the TAG finding, I'd say.

On the other hand, if we really want to take external QName's and
turn them into URI's, I have an Internet Draft coming out soon; I
conned Dave Orchard into co-authoring.  We can post the draft if
there's interest now.
        /r$

-- 
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview      http://www.datapower.com/xmldev/xmlsecurity.html