Extension headers and firewalls

[Florian Weimer]

* Bjoern A. Zeeb:

> On Fri, 10 Aug 2012, Florian Weimer wrote:
>
>> Deprecating extension headers is one way forward, except that DNSSEC
>> needs fragmentation.
>
> And thanks for taking Ah, ESP, not to say Hop-by-Hop and with that
> Jumbograms away.

AH and hop-by-Hop headers will stop working at some point (if this
hasn't happened yet).  ESP is special, not sure what's going to happen
there.