References nit

   [PKCS1] RSA Laboratories, "PKCS #1: RSA Encryption Standard,"
   version 1.5, November 1993

should instead point to RFC 2313. If you can't get this in before IESG last
call, certianly put it on the list for changes after that. RSA removes old
versions of the PKCS series when they update them, as they are about to do
for PKCS 1, so version 1.5 will become unavailable soon. That's why we got
the RFCs.

--Paul Hoffman, Director
--Internet Mail Consortium