Miles, please review the actual text in the document http://www.imc.org/ietf-xml-use/xml-guidelines-07.html#security I had read the thread you pointed to, and, based on it, added a separate paragraph about security issues with external references. Larry