> > That would not have had the desired effect of confronting sites
> > with the
> > insecurity of extracting keys. We can't force them to stop
> > depending on
> > that in one fell swoop.
> If you create, then require, then eventually eliminate the option,
> you can announce that plan as part of the release
> notes/announcements. Everyone is confronted with it at build time,
> and everyone is told what to expect, and when you will do it.
No, only people who build Heimdal are confronted with it at build time.
Most people will use packaged versions, not build their own.