u/insanitybitin r/programming • Recommends
On “A Rust-based TLS library outperformed OpenSSL in almost every category”
\> Memory safety is probably the easiest important security property for a TLS library to get right.
Memory safety has historically plagued TLS libraries, it is clearly not "easy" to solve.
But even beyond that, Rust offers more than memory safety. It also offers a really expressive type system - in particular, there are many great patterns for expressing state machines.
Here is the author discussing some of the ways that rustls leverages rust's type system to provide \*semantic\* guarantees, not just memory safety.
[video