Why is Except limited to local fragments?

I was just rereviewing [1] while getting it ready for CR publication and 
had a substantive question: why must the Except URI's be "same document URI 
references"? The schema says anyURI and this doesn't permit one to use a 
detached signature...? (Maybe this has already been covered, but if so, I 
forgot the reason! <smile/>)


[1] http://www.w3.org/Encryption/2001/Drafts/xmlenc-decrypt.html#transform
The REQUIRED URI attribute value of the dcrpt:Except element MUST be a 
non-empty same-document URI reference [URI] (i.e., a number sign ('#') 
character followed by an XPointer expression (as profiled by 
[XML-Signature, Section 4.3.3.2]) and identify an enc:EncryptedData. 

-- 

Joseph Reagle Jr.                 http://www.w3.org/People/Reagle/
W3C Policy Analyst                mailto:reagle@w3.org
IETF/W3C XML-Signature Co-Chair   http://www.w3.org/Signature/
W3C XML Encryption Chair          http://www.w3.org/Encryption/2001/

Received on Wednesday, 27 February 2002 16:54:04 UTC