- No more OpenSSL 1.x support - Remove 1DES and 3DES - Remove NETLOGON, NTLM (client and 'digest' service)
Prompted by discussion on heimdal-discuss by Michael Wood, Russ Allbery, and Henry B. Hotz.