Limiting TLS restrictions to 1.2
Clarifying DHE usage
Adding cipher suite ordering restriction
Fixing references
Editorial tweak
Making it clear how INADEQUATE_SECURITY applies
Editorial changes
Adding note about suites with unknown properties and their effect
Editorial change
Textual changes from IETF91 discussion outcome
Updating text to restore key exchange size
Removing dead references
Adding cipher suite list contents
Addressing concerns from reviews
Update DHE/ECDHE requirements to permit the use of INADEQUATE_SECURITY
Moving to MAY for connection error
Moving to SHOULD for cipher suites.
Noting risks of violating the cipher suite restriction (the UNLESS for the SHOULD)
Noting HTTP/1.1 fallback behaviour, and corresponding risks
Attempting to make the TLS 1.2/1.3+ limitations clearer.