clarify the properties we require of new FFDHE groups
clarified choosing short exponents, thanks to Bodo Moeller and Rene Struik
relax a bit about possible contradictions
set aside high-byte 0x01 for ffdhe
make separate FFDHEKeyExchange handshake message
rip out funny key exchange business for simplicity
major readthrough and cleanup
no one has raised any suggestion that we need the server to be able to implement support here
we will get into the weakest group in discussion tomorrow morning.
more cleanup
added reference back to ENISA
Security Considerations section on forward secrecy
more cleanup
removed ffdhe6144 to reduce fingerprinting and clutter
updated version to -03