Rustls TLS library

FanJ · Feb 28, 2022

In the recent thread about ISRG I posted about Prossimo.

I wanted to start a new thread about one of the projects of Prossimo: the Rustls TLS library.
https://www.memorysafety.org/initiative/rustls/

The story of our work with Rustls begins with another piece of software, OpenSSL. OpenSSL is a ubiquitous TLS library, used in a large percentage of all devices connected to the Internet. Unfortunately, it's written in C and has a long history of memory safety vulnerabilities.
Click to expand...

It's important for the security of the Internet that we move away from TLS libraries that aren't memory safe. It's highly unlikely that we can get the OpenSSL project to move away from C so we need to work on a memory safe alternative and get the Internet's critical software infrastructure to make the switch.
Click to expand...

Fortunately, there is an excellent alternative to OpenSSL for many use cases. Rustls is a high-quality TLS implementation written in Rust, a memory safe language. We believe Rustls represents the future of TLS implementation on the Internet.
Click to expand...

I could only find the following thread:
https://www.wilderssecurity.com/thr...rmed-openssl-in-almost-every-category.418896/

So, what are your thoughts (also with respect to OpenSSL)?

Log in or Sign up

Rustls TLS library

FanJ Updates Team

Log in or Sign up

Rustls TLS library

FanJ Updates Team

Useful Searches