[Extracted from Blair Dillaway's mail to the list.]

-          Section 4.4 – I’m not a fan of yet another list of weak ciphers folks shouldn’t use. Can’t this just 
indicate briefly that cipher suites which don’t support authN, are subject to man-in-the-middle-attacks, etc. must not 
be used.  I would also point out that since this profile always requires server authN you can’t use the listed ciphers 
and be compliant anyway.