rustls: modern, faster, safer TLS
summary
rustls is a TLS stack written in safe Rust that implements TLS 1.2 and 1.3 and aims to include only the “good bits.” it ships a simple pipe-like API, depends on ring for crypto, and enforces authenticity via types so verification cannot be bypassed at runtime. benchmarks show 25 Gbps throughput with fewer copies, resumed handshakes much faster, full handshakes currently ~1.6x slower but improving, and a heavy test suite with 97% line coverage; crate itself contains no unsafe blocks.
AI-written summary · about
chapters (34)
- 0:00Intro
- 0:38What is rustls
- 1:06TLS
- 1:45Goals
- 2:09Characters
- 3:18Integrity
- 4:53History
- 6:27Deployment
- 7:06Countermeasures
- 10:20Modern TLS
- 12:01Bindings
- 12:15TLS API
- 13:29Tokyo
- 15:57Rustls 2 years old
- 16:17Testing
- 17:10Performance
- 18:04Shortcut
- 18:47Rustls vs Open
- 19:39Handshaking performance
- 20:08Full handshake performance
- 21:25TLS open source
- 22:29BIM chaos
- 23:09Error codes
- 23:41Type system
- 24:00Verification
- 24:53Terminal State
- 25:47The Future
- 26:02Calton
- 27:13Test
- 28:59Questions
- 30:03Timing bugs
- 30:28Scope
- 30:43Ring
- 33:24OpenSSL API
related talks
11mA Decade of Rustls
36mFast, secure, safe: the web that can still be
28m"Safety in an Unsafe World"
45mBuilding Safe and Secure Systems in Rust
45mTLSv1.3 from scratch
32mEmbracing the Future: The Effortless Mutual TLS and Traffic Control Without Sidecars
30mIntegrating Rust into Tor: Successes and Challenges
04m"Scaling Safety: Rust at Google”