Public review comment received from Nicholas Humfrey (point 7)

7) The wording around the characters allowed in client ids (section
3.1.3.1) is slightly confusing - particularly as the 'MAY' clause is
likely to lead to incompatible implementations. I would like to see '-'
appearing in the list of required characters - as RFC952 specifies for
host names.