[Extracted from Blair Dillaway's mail to the list.]

-          Section 4.3 lists no mandatory cipher suites, R0402 – R0405 all say if a cipher suite is supported, it 
should be used. If you want to ensure interop there should be mandatory to implement ciphers.