3 ms·

Or, instead of expecting people to go rewrite stuff for you, you could go switch to rustls. It literally costs zero money.

• gpm 4y ago
  Genuine question, should I prefer rustls or openssl for security in rust. A reasonable number of crates let you switch between them with just a cfg flag, and when using them the only difference that makes it way to the user is security (and maybe performance), but I'm not sure which I should consider to be more secure?
  • JSGdev 4y ago
    At this point we consider rustls about as secure or a little more. Ring is a high-quality set of primitives thats basically some carefully ported boringssl code, and both it and rustls have been around for a good while and have plenty of contributors. Tbh we like the lack of old legacy cruft (where most openssl bugs get found) as much as a memory-safe language, ditching all that ancient code we don't need really cuts down attack surface.