What are you suggesting, though? Rewrite it in Rust? That might be worth it in the long run, but it would be a considerable effort that would likely take a lon

What are you suggesting, though? Rewrite it in Rust? That might be worth it in the long run, but it would be a considerable effort that would likely take a long time to become a feasible replacement for openssl. E.g., it seems likely to me that it would suffer from more bugs until it reached a certain level of maturity. It would take a focused, long-term, sustained effort by experts to achieve and would still have many ways it could fail. I would guess we'll get a chance to find out if this could work, though. I think someone must be attempting this already. Of course, then the next level of "safe" language will come out, with more guarantees, and we think about rewriting to that. Personally, I think a more productive, much shorter path, would be to use a safe layer on top of the existing C language, and port the existing openssl to that.