Support assembly hand optimized crypto functions (i.e. faster run time) Enable support for RFC 3779 (X.509 Extensions for IP Addresses and AS Identifiers) Support for the old/insecure SSLv3 protocol -- note: not required for TLS/https Enable support for discouraged TLS compression Enable the Heartbeat Extension in TLS and DTLS Build support for SSL/TLS ciphers that are considered "weak"