SHA1 based signature algorithms in XML Signature 1.1

Looking through the algorithms table in the editor's draft:

   http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-11/#sec-AlgID

... I notice that we have ample warning in the section on digest  
algorithms, but less (and different) in the section on signature  
algorithms.

Specifically:

1. HMAC-SHA1 is mandatory to implement, but discouraged to use.
2. DSA-SHA1 is mandatory to implement for verification, and optional  
for signature generation.
3. We do not give any admonishment for RSA-SHA1 (which remains  
recommended),  and for the optional ECDSA-SHA1.

Thoughts?
--
Thomas Roessler, W3C  <tlr@w3.org>