A Decade of Rustls
summary
Rustls traces back to 2016 and reaches a stable API around 0.23 while adding FIPS-certified cryptography, certificate compression, encrypted client hello (ECH) and post-quantum handshakes; ongoing benchmarking targets bulk-data performance. Version 0.24 introduces external buffering (drops previous stdio trait flow and reshapes no-std support), an async-friendly handshake state machine to avoid blocking cert checks, a split mode to let send/receive run on separate threads (potentially doubling full‑duplex throughput), and requires explicit crypto provider selection to avoid feature-unification panics.
AI-written summary · about
chapters (9)
- 0:00Introduction and background
- 1:49Early breaking changes and stability
- 2:55New features in Rustls 0.23
- 4:07Rustls 0.24 breaking changes
- 4:58Buffering improvements
- 6:40Async handshake decisions
- 7:59Split mode for performance
- 9:57Cryptography provider selection
- 10:37Future plans and 1.0 release
