#Rustls
rustls, our modern memory-safe TLS implementation is 10 years old! @jbp.io wrote a blog post reflecting on how we got here:

rustls.dev/blog/2026-09...
rustls: A Decade of Rustls
rustls.dev
September 9, 2026 at 10:13 AM
In case anyone wants a template for using `rustls` for ad-hoc self signed certs (and actually an ad-hoc CA), I polished up what I was hacking on today.

It also dynamically regenerates a cert every time your IPs change, which seems useful to me.

github.com/OneVariable/...
GitHub - OneVariable/rustls-self-signed-demo: A demo of rustls, tokio-rustls, and rcgen in one place
A demo of rustls, tokio-rustls, and rcgen in one place - OneVariable/rustls-self-signed-demo
github.com
January 7, 2025 at 3:28 PM
At #rustweek I'll have new stickers celebrating a decade of rustls. First commit was ten years ago tomorrow
May 1, 2026 at 8:13 AM
To end the year, a new major version of #rustlang reqwest, v0.13.0 is out! 🚀

- This brings rustls by default, replacing native-tls. 🦀
- Some feature and method cleanup.
- But easy to upgrade for most everyone.

seanmonstar.com/blog/reqwest...
reqwest v0.13 - rustls by default
reqwest v0.13 brings rustls by default, feature cleanup, but otherwise easy to upgrade.
seanmonstar.com
December 30, 2025 at 3:59 PM
Just published a new #rustlang reqwest release candidate: v0.13.0-rc.1.

This has some breaking changes, the biggest was switching to rustls by default.

I'd appreciate if you gave it a spin 🙏

github.com/seanmonstar/...
Release v0.13.0-rc.1 · seanmonstar/reqwest
👀 Discussion here if you give it try, thanks! Main breaking changes rustls is now default instead of native-tls rustls provider defaults to aws-lc instead of ring (rustls-no-provider exists if you...
github.com
December 23, 2025 at 10:03 PM
Want to help #rustlang reqwest switch its default to rustls? Here's the medium-effort mentored issue: github.com/seanmonstar/...
Switch default TLS to rustls · Issue #2723 · seanmonstar/reqwest
We want to change the default TLS library used by reqwest from native-tls to rustls. We will still offer native-tls as an option, since some people need it for some reason or another. But the vast ...
github.com
June 23, 2025 at 5:48 PM
I wrote another blog post for the Prossimo blog about how we improve the unhappy path for rustls users:

www.memorysafety.org/blog/rustls-...
Improving Error Handling in Rustls
Dirkjan Ochtman is a maintainer of the Rustls TLS library that we've invested in since 2021. While he and the other maintainers have made many improvements and landed important features, we've asked D...
www.memorysafety.org
October 1, 2025 at 3:47 PM
I wrote a blog post about rustls performance on the server for the Prossimo blog; rustls comes out comparing well to the alternatives, and we’re still improving it!

www.memorysafety.org/blog/rustls-...
Rustls Server-Side Performance
In past years, the Rustls project has been happy to receive substantial investments from the ISRG. One of our goals has been to improve performance without compromising on safety. We last posted about...
www.memorysafety.org
May 13, 2025 at 1:20 PM
Memory safe Rustls is now outperforming both OpenSSL and BoringSSL. So proud of what this team is doing. www.memorysafety.org/blog/rustls-...
Rustls Outperforms OpenSSL and BoringSSL
ISRG has been investing heavily in the Rustls TLS library over the past few years. Our goal is to create a library that is both memory safe and a leader in performance. Back in January of this year we...
www.memorysafety.org
October 22, 2024 at 2:09 PM
PQC in rustls state in a skeet:

ML-KEM is enabled (and prioritized) by default. Initial (and, for now, unstable) support for ML-DSA support is available via the rustls-post-quantum provider (github.com/rustls/rustl...).
post-quantum: add unstable ML-DSA support by djc · Pull Request #2550 · rustls/rustls
Fixes #2417.
github.com
July 22, 2025 at 5:41 PM
Hello! I'm Daniel/@cpu

I <3 open source and split my time between working for @geomys.org on Go cryptography, and hacking on various other bits of applied cryptography (notably github.com/rustls/rustls & friends).

I'm new to Bluesky. Let's see how it goes?
May 23, 2025 at 4:55 PM
rustls outperforms OpenSSL and BoringSSL.

Security and performance: pick two!

www.memorysafety.org/blog/rustls-...
Rustls Outperforms OpenSSL and BoringSSL
ISRG has been investing heavily in the Rustls TLS library over the past few years. Our goal is to create a library that is both memory safe and a leader in performance. Back in January of this year we...
www.memorysafety.org
October 22, 2024 at 2:30 PM
No better feeling in open source: when your OSS project upstreams an improvement to another OSS project (which in this case has nearly 200k repos depending on it)

github.com/rustls/rustl...

Great stuff Diva.
implement quic multipath encryption by divagant-martian · Pull Request #2312 · rustls/rustls
At https://github.com/n0-computer we are working on implementing multipath in quinn. Multipath requires a few changes in the nonce calculation for packet protection (described in section 4.1). This...
github.com
August 19, 2025 at 4:01 PM
With the @openuk.bsky.social Awards coming up, we’re excited that Rustls — a memory-safe TLS library — is shortlisted in two categories, and Creator Joe Birr-Pixton is also recognized individually.

The Rust Foundation is proud to support Rustls through the Rust Innovation Lab 🧡
Rustls Shortlisted for Two 2025 OpenUK Awards - The Rust Foundation
The Rust Foundation is delighted to congratulate Rustls for being shortlisted in the Open Source Software and Security categories of the OpenUK Awards 2025 — and Joe Birr-Pixton, Rustls Creator, for…
rustfoundation.org
December 2, 2025 at 7:45 PM
This new graviola release is amazing!

aws-lc-rs v1.17.0: 18 dependencies - 16s release build
rustls-graviola v0.3.4: 45 dependencies - 9s release build
rustls-graviola v0.4.0: 19 dependencies - 5.5s release build

Tested on a 24 vCPU 5950X VM.

github.com/ctz/graviola...
Release 0.4.0 · ctz/graviola
A new ML-KEM-768 implementation using verified assembler from the mlkem-native project. This drops the dependency on libcrux-ml-kem from rustls-graviola and the crate feature. Runtime performance i...
github.com
June 17, 2026 at 3:28 PM
Nerd-sniped by bagder into looking at how rustls-ffi stacks up against OpenSSL on memory allocations/peak heap usage when plugged in as a curl vTLS backend.

Headlines:
* with rustls-ffi 0.15.0: 2,176 allocations. peak heap of 394kB.
* with openssl 3.4.1: 308,132 allocations (!). peak heap of 2.1MB
1.Download https://curl.se using #curl built to use OpenSSL
2. count number of allocations made with heaptrack
3. pause for gasping
4. double-check that curl only does 134 allocs itself, independently of the downloaded size
5. check the heaptrack number again

54,000

hm
curl
curl.se
July 7, 2025 at 3:03 PM
Rustls est disponible en version 0.23.45. Cette version corrige la mauvaise gestion de messages TLS 1.3 au mauvais niveau de chiffrement après un changement de clé (une vulnérabilité vieille de 2 ans) et intègre plusieurs backports ⬇️

github.com/rustls/rustl...
Release 0.23.45 · rustls/rustls
Bug fix: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries Rustls accepted TLS 1.3 handshake messages sent at the wrong encryption level when they followed a key-ch...
github.com
September 15, 2026 at 5:52 AM
OpenUK Awards 25 Open Source Software Category sponsored by Red Badger, Shortlist is live, congratulations to the shortlisted nominees: @bboreham.bsky.social, Rustls github.com/rustls/rustls (@jbp.io), and Jan Faracik 🍾🥂🏆

#openukawards #opensource #opensourcesoftware
November 4, 2025 at 10:30 AM
preliminary support for mlkem768-only key establishment in TLS 1.3 has been merged into rustls:
github.com/rustls/rustl...
Restructure hybrid key exchange implementation by ctz · Pull Request #2259 · rustls/rustls
This PR incorporates and builds on @dconnolly&#39;s work in #2228 to factor out the &quot;hybrid&quot; part of rustls-post-quantum. That&#39;s in preparation to eventually support secp256r1MLKEM768...
github.com
December 9, 2024 at 8:24 PM
🎂 Ten years of Rustls. At #rustconf2026, Rustls project founder Joe Birr-Pixton and open source maintainer Daniel McCarney look back on a decade building a memory-safe TLS library trusted across the industry.

View on schedule: sched.co/2KHyL
Register: bit.ly/45kJb9Y
July 26, 2026 at 3:14 PM