So this goes back to change in 5.0. When using Kerberos/Negotiate authentication with HttpClient we would start using port when constructing SPN to lookup the service. That on it's own is breaking change. It was reported but several people and fixed in 6.0. when we made the behavior optional using AppContext property.
In 6.0, the default behavior is turned off i.e. it mimics 2.x/3.x and somebody can turn it on.
We did not backport the switch to 5.0, but if we do, we would probably leave it on by default so there is no new breaking change in middle of 5.0 servicing releases.
Details here dotnet/runtime#57159