I'm just going by publicized, real world attacks, which I think fall under the 3 categories I listed. > These vulnerabilities are discovered through testing an

I'm just going by publicized, real world attacks, which I think fall under the 3 categories I listed. > These vulnerabilities are discovered through testing and more importantly real world usage. FWIW I disagree that real world usage is necessarily more important. It is quite important, but at the same time the real world usage isn't going to hit all sorts of weird quirky paths. By contrast, Rustls has 97% line coverage, OpenSSL has ~65%. Of course, coverage isn't everything, but that's notable. > It's not a formal proof. It could still be wrong. So long as the type system is sound, I'm not sure this is true. If you embed a state machine into your type system your type system guarantees that the state machine executes as defined. Granted this is not checking against an external model. I will say that rustls still will benefit from wider adoption and more evaluation but imo it addresses the largest concerns today.