Skip to content

v1.1.0

Compare
Choose a tag to compare
@JonathanHelianthicusDoe JonathanHelianthicusDoe released this 29 Jul 19:54
· 2 commits to master since this release
3d827ac

v1.1.0: switch from native-tls (OpenSSL on most platforms, Secure Transport on macOS, SChannel on Windows NT) to rustls.

Also, rpassword version 6 → 7.

The switch to rustls:

  • Makes sbu easier to build & link, as rustls is written in Rust†.
  • Allows sbu to benefit from the technological improvements brought by rustls and ring, including support for modern & secure (and ONLY modern & secure) protocols, API surfaces that are secure by default and are difficult to misuse, and the use of a memory-safe-by-default language like Rust.

rustls is highly mature now, not only claiming to be “ready to use”, but also already enjoying widespread use throughout the Rust ecosystem. It also has undergone thorough formal auditing by third parties (see https://github.com/rustls/rustls/tree/main/audit).


†rustls relies on ring for the implementation of cryptography, and ring is written in a combination of Rust with both assembly and C.