There should be a SecureBridge replacement for the Indy TIdSSLIOHandlerSocketOpenSSL component. You could then assign the SecureBridge component to the IOHandler property of TIdHTTP, TIdSMTP, TIdPop3, and support SSL/TLS without needing the OpenSSL dll's. This would also provide support for TLS 1.3. Indy doesn't currently have official support for TLS 1.3 (although there is the unofficial TaurusTLS),