Comment by starquake

It shows this as justification right now:

Oakley Group 14 is no longer considered secure enough. SHA-1 is no longer considered secure enough (see shattered.io).