ATS is coming...and some questions about this

We all know it’s only 2 weeks till ATS become mandatory for iOS apps, so there are few questions we didn’t find answers officially:

1. Will apps which use unsecure HTTP connection be deleted from market starting 01/01/2017 or they just should be updated with ATS after this?
2. If I use "http://some-site.com/" URL in app and 80 to 443 (HTTP to HTTPS) redirect, will it work or I should update link to https://some-site.com/ ?
3. Can we use OpenSSL certificates or only CA verified ones?
4. What the way to deal with 3rd party resources which don’t use SSL?

Thanks for the answers in advance!