* Some editing * Explicitly mention the possible need for rate-limiting of caps processing in Security Considerations * Reference UTF-8 and Base64 RFCs * Reference U+002E properly * Clarify error condition for Hash Function Input algorithm