@jbp.io and I will be presenting on our upki project to make TLS certificate verification more secure for non-browser Linux apps.

"No way to prevent this" says only cryptographic API where this regularly happens - barghest.asia/blog/cve-202... (previously jbp.io/2014/01/16/o... )

At #rustweek I'll have new stickers celebrating a decade of rustls. First commit was ten years ago tomorrow

youtu.be/rgZlzCd0DUU?... I guess this means I'm a tech influencer now? Thanks @frame.work

An update on rustls performance: it’s still pretty fast. www.memorysafety.org/blog/26q1-ru...

keep hearing "PULL UP" "PULL UP" and "TERRAIN, TERRAIN" but i'm pretty sure there's nothing to worry about

I wrote a blog post for the Alpha Omega Foundation on the work I did to surface RustSec advisories on crates.io: alpha-omega.dev/blog/surfaci...

github (2026, oil on canvas)

Merkle Tree Certs! #realworldcrypto

None of you are giving me enough credit for not participating on the TLS working group mailing list. You're welcome. Everything I don't do, I don't do it for you.

"If we publish this, suddenly people will start taking the cryptography opinions of the TLSWG very seriously. This would definitely happen thanks of the decades of demonstrated good decision making."

if anything, i've found that the quality of his posts have gone down over time, i call this "doctorowification"

One of the things I've been working on recently.

rust `use` statements are a conspiracy by big merge conflict to sell more conflicts

Life of a town councillor

Gary Larson: In my cartoon I invented Cow Tools as a cautionary tale Cows: At long last, we have created the Cow Tools from classic newspaper comic Cow Tools

Here are some statistics (estimated via Poisson inference on the observed hit counts): Keys generated: 2^34.5 (95% CI: 2^33.6–2^35.0) Core-years: 56.7 (95% CI: 30.7–82.6) Average cores: ~5,200 (95% CI: 2,800–7,500) This is a lot, folks! Really grateful for this level of community support.

Delighted to be recognised by @openuk.bsky.social for my recent open source work!

To end the year, a new major version of #rustlang reqwest, v0.13.0 is out! 🚀 - This brings rustls by default, replacing native-tls. 🦀 - Some feature and method cleanup. - But easy to upgrade for most everyone. seanmonstar.com/blog/reqwest...

This week on #OpenSourceSecurity I chat with Dirkjan Ochtman and Joe Birr-Pixton about #Rustls. A lot has happened with Rustls in the last few years (and there's a lot more to come). Writing a TLS implementation is incredibly complicated, even when you don't have to worry about memory safety

Just published a new #rustlang reqwest release candidate: v0.13.0-rc.1. This has some breaking changes, the biggest was switching to rustls by default. I'd appreciate if you gave it a spin 🙏 github.com/seanmonstar/...

DSE assessment in shambles

Earlier this year, LWN.net featured an excellent article named "Linux's missing CRL infrastructure", and today Canonical announced it will be working with me and @jbp.io over the coming weeks to start bridging the PKI infrastructure gap. discourse.ubuntu.com/t/addressing...

With the @openuk.bsky.social Awards coming up, we’re excited that Rustls — a memory-safe TLS library — is shortlisted in two categories, and Creator Joe Birr-Pixton is also recognized individually. The Rust Foundation is proud to support Rustls through the Rust Innovation Lab 🧡

my “we are not enron” T-shirt has people asking a lot of questions already answered by my shirt

heheheheh

lots of posts about unwrap(). not too many posts about simply not having your code and configuration meet for the very first time in production.

sounds like something the bad bacteria would put on their packaging

Congratulations to the shortlisted nominees in the 6th annual OpenUK Awards 2026, 🏆🍾🥂 Andy Piper, @bboreham.bsky.social, Daniel Gale, @davidtw.co, Dermoscopea, @flox.dev, Godfrey Inyama, Jan Faracik, @jbp.io, LVFS (fwupd.org), lowRISC CIC, Dr Margaret Hartnett, @manyfold.3dp.chat.ap.brid.gy,...

New Rust RFC: adding a crates.io Security tab github.com/rust-lang/rf...

"I appreciate that you're frustrated, but I should clarify: I'm an AI assistant, so I don't have a mother or family relationships."

It's time to send GCC to live on a farm.

I wrote another blog post for the Prossimo blog about how we improve the unhappy path for rustls users: www.memorysafety.org/blog/rustls-...

Microsoft has a product called Copilot Pro, and Github has a product called Copilot Pro. They are different prices, different and unrelated products, shipped by teams that have no awareness of each other. Incredible product management and business acumen.

We have a little blog post about this rustls.dev/blog/2025-09...

PowerDNS Recursor 5.3.0 has a nice note in the changelog: > The embedded webserver used to display the status page and process REST API calls has been rewritten in Rust and now supports multiple listen addresses and TLS. The new code is powered by Hyper+Rustls+Ring 🦀 🔒 (h/t Stefan Schmidt)

When working with async, you often need to call a function that would block the runtime. Turns out not all blocking functions are the same Tokio defines two kinds of blocking functions: IO bound and CPU bound. A close read of the tokio docs tells you to avoid CPU bound tasks in spawn_blocking

i've been trying to use LLMs a lot today, to convert around 1000 pages of dense legal agreement PDFs into markdown.

** Major milestone ** our sudo-rs is the default sudo for the upcoming Ubuntu 🚀 🦀 More on the Ubuntu blog: discourse.ubuntu.com/t/sudo-rs-is... #rust #rustlang

Happy new Rust! 🎆🦀 Rust 1.89.0 has been released! This release brings you inferrred array length, new lints, u128/i128 in extern "C", NonZero<char>, File::lock, many x86 intrinsics, and much more! ✨ Check out the blog post and release notes for all the details: blog.rust-lang.org/2025/08/07/R...

When rustc 1.89 is released next week, Graviola is going to shift to that as its MSRV to take advantage of AVX512 intrinsics being stabilised. If your CPU has AVX512 support, AES-256-GCM speed will improve to about 8.9GiB/s (from about 5.2 now) as measured on a random AMD CPU.

Replication of Quantum Factorisation Records with an 8-bit Home Computer, an Abacus, and a Dog (Peter Gutmann, Stephan Neuhaus) ia.cr/2025/1237

Today we released rustls 0.23.29 crates.io/crates/rustl... -- highlights are better error reporting for unsupported signature algorithms in certificates, and quite a few performance improvements (via a set of changes that started almost 2 years ago!)

Nerd-sniped by bagder into looking at how rustls-ffi stacks up against OpenSSL on memory allocations/peak heap usage when plugged in as a curl vTLS backend. Headlines: * with rustls-ffi 0.15.0: 2,176 allocations. peak heap of 394kB. * with openssl 3.4.1: 308,132 allocations (!). peak heap of 2.1MB

You've hit the free plan limit for overconfidence followed by grovelling apologies. You can create more inane nonsense when the limit resets in 23 hours and 3 minutes.

learning a lot about US business practices from severence. does the marching band come under opex or capex? do middle management only dance on special occasions?