Let PDF readers find their own DES library. Or at lest make its non-default part of the build. But even having it there as optional is risky and adds to an alr

Let PDF readers find their own DES library. Or at lest make its non-default part of the build. But even having it there as optional is risky and adds to an already huge maintenance burden. You know the distro packagers will enable every feature just like they did with DTLS support (which is what made Heartbleed pervasive). Packagers don’t want to deal with complaints and support tickets because their OpenSSL build doesn’t do 3DES. So they turn on all the things.