Further TLS extension improvements