From f180818976a268890899a95384889d16cf5fc68b Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Sat, 7 Mar 2026 14:44:17 +0100 Subject: [PATCH] DEPRECATE.md: SMB and NTLM become build-time opt-in Closes #20847 --- docs/DEPRECATE.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/docs/DEPRECATE.md b/docs/DEPRECATE.md index a040842baf..d8984a07e6 100644 --- a/docs/DEPRECATE.md +++ b/docs/DEPRECATE.md @@ -42,6 +42,19 @@ general. TLS-SRP support gets removed in August 2026. +## SMB goes opt-in + +The SMB protocol has weak security and is rarely used these days. After curl +8.19.0 SMB support becomes opt-in. + +## NTLM goes opt-in + +The NTLM authentication method has weak security and is rarely used these +days. It has been deprecated by Microsoft and does not work over HTTP/2 or +HTTP/3. + +After curl 8.19.0 NTLM support becomes opt-in. + ## Past removals - axTLS (removed in 7.63.0)