curl removes two security protocols, signaling how critical infrastructure manages technical debt

curl will drop TLS-SRP support in August 2026 and deprecate SMB protocol support, reflecting how ubiquitous libraries sustain themselves across billions of devices. Both features saw minimal adoption since launch. The removals shrink CVE surface and reduce compatibility work for a 28-year-old codebase. Most users face no impact; teams still relying on either protocol have a firm timeline to migrate.