Delighted to be recognised by @openuk.bsky.social for my recent open source work!

To end the year, a new major version of #rustlang reqwest, v0.13.0 is out! 🚀 - This brings rustls by default, replacing native-tls. 🦀 - Some feature and method cleanup. - But easy to upgrade for most everyone. seanmonstar.com/blog/reqwest...

This week on #OpenSourceSecurity I chat with Dirkjan Ochtman and Joe Birr-Pixton about #Rustls. A lot has happened with Rustls in the last few years (and there's a lot more to come). Writing a TLS implementation is incredibly complicated, even when you don't have to worry about memory safety

Just published a new #rustlang reqwest release candidate: v0.13.0-rc.1. This has some breaking changes, the biggest was switching to rustls by default. I'd appreciate if you gave it a spin 🙏 github.com/seanmonstar/...

DSE assessment in shambles

Earlier this year, LWN.net featured an excellent article named "Linux's missing CRL infrastructure", and today Canonical announced it will be working with me and @jbp.io over the coming weeks to start bridging the PKI infrastructure gap. discourse.ubuntu.com/t/addressing...

With the @openuk.bsky.social Awards coming up, we’re excited that Rustls — a memory-safe TLS library — is shortlisted in two categories, and Creator Joe Birr-Pixton is also recognized individually. The Rust Foundation is proud to support Rustls through the Rust Innovation Lab 🧡

my “we are not enron” T-shirt has people asking a lot of questions already answered by my shirt

heheheheh

lots of posts about unwrap(). not too many posts about simply not having your code and configuration meet for the very first time in production.

sounds like something the bad bacteria would put on their packaging

Congratulations to the shortlisted nominees in the 6th annual OpenUK Awards 2026, 🏆🍾🥂 Andy Piper, @bboreham.bsky.social, Daniel Gale, @davidtw.co, Dermoscopea, @flox.dev, Godfrey Inyama, Jan Faracik, @jbp.io, LVFS (fwupd.org), lowRISC CIC, Dr Margaret Hartnett, @manyfold.3dp.chat.ap.brid.gy,...

New Rust RFC: adding a crates.io Security tab github.com/rust-lang/rf...

"I appreciate that you're frustrated, but I should clarify: I'm an AI assistant, so I don't have a mother or family relationships."

It's time to send GCC to live on a farm.

I wrote another blog post for the Prossimo blog about how we improve the unhappy path for rustls users: www.memorysafety.org/blog/rustls-...

Microsoft has a product called Copilot Pro, and Github has a product called Copilot Pro. They are different prices, different and unrelated products, shipped by teams that have no awareness of each other. Incredible product management and business acumen.

We have a little blog post about this rustls.dev/blog/2025-09...

PowerDNS Recursor 5.3.0 has a nice note in the changelog: > The embedded webserver used to display the status page and process REST API calls has been rewritten in Rust and now supports multiple listen addresses and TLS. The new code is powered by Hyper+Rustls+Ring 🦀 🔒 (h/t Stefan Schmidt)

When working with async, you often need to call a function that would block the runtime. Turns out not all blocking functions are the same Tokio defines two kinds of blocking functions: IO bound and CPU bound. A close read of the tokio docs tells you to avoid CPU bound tasks in spawn_blocking

i've been trying to use LLMs a lot today, to convert around 1000 pages of dense legal agreement PDFs into markdown.

** Major milestone ** our sudo-rs is the default sudo for the upcoming Ubuntu 🚀 🦀 More on the Ubuntu blog: discourse.ubuntu.com/t/sudo-rs-is... #rust #rustlang

Happy new Rust! 🎆🦀 Rust 1.89.0 has been released! This release brings you inferrred array length, new lints, u128/i128 in extern "C", NonZero<char>, File::lock, many x86 intrinsics, and much more! ✨ Check out the blog post and release notes for all the details: blog.rust-lang.org/2025/08/07/R...

When rustc 1.89 is released next week, Graviola is going to shift to that as its MSRV to take advantage of AVX512 intrinsics being stabilised. If your CPU has AVX512 support, AES-256-GCM speed will improve to about 8.9GiB/s (from about 5.2 now) as measured on a random AMD CPU.

Replication of Quantum Factorisation Records with an 8-bit Home Computer, an Abacus, and a Dog (Peter Gutmann, Stephan Neuhaus) ia.cr/2025/1237

Today we released rustls 0.23.29 crates.io/crates/rustl... -- highlights are better error reporting for unsupported signature algorithms in certificates, and quite a few performance improvements (via a set of changes that started almost 2 years ago!)

Nerd-sniped by bagder into looking at how rustls-ffi stacks up against OpenSSL on memory allocations/peak heap usage when plugged in as a curl vTLS backend. Headlines: * with rustls-ffi 0.15.0: 2,176 allocations. peak heap of 394kB. * with openssl 3.4.1: 308,132 allocations (!). peak heap of 2.1MB

You've hit the free plan limit for overconfidence followed by grovelling apologies. You can create more inane nonsense when the limit resets in 23 hours and 3 minutes.

learning a lot about US business practices from severence. does the marching band come under opex or capex? do middle management only dance on special occasions?

Here's my talk on Graviola -- youtu.be/n6gA93iSj68

"by default" implies there's an option for this -- right?

Impressively well-run conference and events. Thanks so much to the organisers! 💐

We created a safer AV1 decoder, rav1d, by forking the dav1d decoder and rewriting the C code in Rust. It works great except our Rust is 5% slower than the C. We're not sure why so we're offering a $20k bounty to figure it out and make the Rust code faster. www.memorysafety.org/blog/rav1d-p...

I wrote a blog post about rustls performance on the server for the Prossimo blog; rustls comes out comparing well to the alternatives, and we’re still improving it! www.memorysafety.org/blog/rustls-...

"Ich askid ChatGPT," Well Ich askid the stones, and the forest, and the rayne, and the wynde, and what thei seyde was learninge, and dreames, and growinge thinges, and a worlde wher we talke to each othir.

Kicking off our 2025 Maintainer Month series, Dirkjan Ochtman (dirkjan.ochtman.nl) joins Richard (@richlitt.bsky.social) to talk Rust (github.com/rustls/rustls) maintenance, open source funding, and sustaining projects without burning out. Listen at 🎙️ podcast.sustainoss.org/268

Looking forward to RustWeek next week organised by @rustnl.bsky.social -- I'll be in Utrecht from Monday to Saturday, talking about Graviola on Wednesday, attending the maintainers unconference, and sampling as many dutch beers as I can!

i wrote a blogge. currently averaging one a year. jbp.io/2025/05/02/g...

TIL: in Rust, adding a Drop impl to a type is a Major semver change which is globally visible; it can be observed even through opaque intermediate types. github.com/obi1kenobi/c...

PhD Timeline xkcd.com/3081

Someone here nerdsniped me into researching AEGIs recently. I forgot who, but I blame you for this github.com/conradludgat... My AVX512 rust impl of AEGIS-128X4 can get 60GB/s encrypting 16KiB blocks on my Ryzen 9 7950x per thread. Absolutely wild. Anyway, it was a fun project.

I really appreciate all the hard work done by the #realworldcrypto steering committee and to AWS for stepping up to organise in Seattle in 2027, but I’m going to come out and say it: with the US as it now is, I think this choice of location is a mistake.

My neighbour told me Red Bull's second seat keeps eating his young drivers so I asked how many drivers he has and he said he just goes to the feeder team and gets a new driver afterwards so I said it sounds like he’s just feeding young drivers to Red Bull and then his daughter started crying.

Looking forward to attending Real World Crypto next week, which will be my fifth RWC and my first since NY 2020. Also attending OSCW for the first time. Look out for a rustls t-shirt!

Regular reminder for international businessfolks: US daylight savings change is *today* EU daylight savings change is in *three weeks*, Mar 30th Your recurring meetings will be different depending on the organizer, check your calendars (most handle this correctly), when in doubt double check.

Constant-Time Code: The Pessimist Case (Thomas Pornin) ia.cr/2025/435