Section 6
Figure 11 seems to show that the initial ServerHello has message_seq=1,
but §5.2 says that "[t]he first message each side transmits in each
association always has message_seq = 0". Which one is it? (A change
here would affect all the server's messages except the final ACK.)
Based on review from Ben: