You know you’re an OSS maintainer when the principal engineer at a large US company messages you on LinkedIn to “ask for your thoughts on the design of” $feature. (The GitHub issues are right there, as is the Discord chat link.) (Of course this large company is not sponsoring your work.)

We have a little blog post about this rustls.dev/blog/2025-09...

LIVE at #rustconf: The Rust Foundation has launched its new "Rust Innovation Lab" with Rustls, a leading TLS library, as the inaugural hosted project! The RIL provides comprehensive support for funded OSS projects, ensuring sustainable & community-led growth. rustfoundation.org/media/rust-f...

Using Python code in your Rust test suite is inevitably tech debt.

Open source is one person opensourcesecurity.io/2025/08-oss-...

I’m currently typing on an extended Apple keyboard but thinking about buying something more ergonomic (as in split etc). I used some of the MS Ergonomic keyboards before but they were sort of loud, required more effort for keypresses and weren’t all that reliable. What should I look at?

Reminder that github.com/djc/pyrtls is a thing that exists (and I would be willing to invest more if people wanted to start using it).

Too bad… www.theargumentmag.com/p/giving-peo...

And for people who like this, check out Secretive to authenticate the use of your SSH keys with TouchID: github.com/maxgoedjen/s...

@raviqqe.bsky.social do you still want to maintain the array-queue crate? github.com/raviqqe/arra... looks like a somewhat serious issue, and we're considering publishing an advisory about it. github.com/rustsec/advi...

We have our usual monthly update for Linebender: linebender.org/blog/tmil-19/ A lot of good progress, especially on the renderer, and fearless_simd is coming along well. Also some personal news: I'm leaving Google and taking a new role at Canva, moving to Australia in January.

once again, #rustlang is the most admired programming language on the stack overflow survey: survey.stackoverflow.co/2025/technol...

The matches-index (July 2025): sifting through top (recently) downloaded crates from crates.io to find small crates that might make sense for core/alloc/std inclusion. internals.rust-lang.org/t/matches-in...

My friends. This is not a good idea: www.wired.com/story/silico... - take it from every single wisdom tradition in the history of the world. You can love your work, but your work cannot love you back. Have more respect for yourself and your peers. Work hard. Do good work.

PQC in rustls state in a skeet: ML-KEM is enabled (and prioritized) by default. Initial (and, for now, unstable) support for ML-DSA support is available via the rustls-post-quantum provider (github.com/rustls/rustl...).

PSA: if you use VS Code and are questioning what unholy mess of machine-generated code is now enabled by default, thereby messing up your typing/navigation: disable "Next Editing Suggestions" in your settings.

I’ve been maintaining the Rust flamegraph implementation for three years, releasing about every 3 months on average. Consider sponsoring my work if it’s been valuable to you(r team).

sudo-rs is headed to Ubuntu 25.10! Congrats to the @trifectatech.bsky.social team! www.memorysafety.org/blog/sudo-rs...

One of the best explanations of how (and why) you want to make small commits yet: matklad.github.io/2025/07/07/i...

Pretty excited about the release of instant-acme 0.8, with lots of work from @cpu.xkeyscore.club (who joined as a maintainer) on ARI, profiles, integration testing and a much improved API. github.com/djc/instant-...

Nerd-sniped by bagder into looking at how rustls-ffi stacks up against OpenSSL on memory allocations/peak heap usage when plugged in as a curl vTLS backend. Headlines: * with rustls-ffi 0.15.0: 2,176 allocations. peak heap of 394kB. * with openssl 3.4.1: 308,132 allocations (!). peak heap of 2.1MB

It is time!

Graviola: fast, high-assurance cryptography for Rust by Joe Birr Pixton at RustWeek 2025! www.youtube.com/watch?v=n6gA... ‪@jbp.io‬ #rustlang #RustWeek

So excited to hear about ersc.io #jj-vcs

Hello! I'm Daniel/@cpu I <3 open source and split my time between working for @geomys.org on Go cryptography, and hacking on various other bits of applied cryptography (notably github.com/rustls/rustls & friends). I'm new to Bluesky. Let's see how it goes?

Today's the day. So help me and Fareed: was the most successful company founded in 2020 co-located the majority of the time?

We noticed a CPU bug on Raptor Lake because the bounds checking in our Rust zlib implementation was hitting "impossible" bounds checks: github.com/trifectatech... The Oodle devs noticed similar issues in their decompressors and managed to root cause it: fgiesen.wordpress.com/2025/05/21/o...

Modularity is underestimated.

On my way back home after RustWeek 2025. So, so proud that we hosted the Rust Project All-Hands, the 10 years of Rust celebration, and the biggest Rust conference yet. See you all next year! Thanks to my co-organizers Jana, Laura, @tertsdiepraam.bsky.social and @mara.bsky.social ❤️ #rustlang #rust

Rust slower than C? This cannot stand… Let yourself be nerdsniped for cash!

I wrote a blog post about rustls performance on the server for the Prossimo blog; rustls comes out comparing well to the alternatives, and we’re still improving it! www.memorysafety.org/blog/rustls-...

Enjoyed this conversation with @richlitt.bsky.social about how I do OSS maintenance in the Rust ecosystem!

* Announcement * Memory-safe sudo to become the default in Ubuntu! @canonicalltd.bsky.social is supporting us to get sudo-rs ready for Ubuntu 25.10.  trifectatech.org/blog/memory-...

More work on deprecating curl and native-tls usage in favor of reqwest & rustls!

The idea that you can just “teach computer science” and be apolitical is a beautiful dream that expired in the 2000s, at the latest. Computer science has re-organized every facet of our society: it is inherently political. Instead of taking this idea seriously, we ran from it. Now we live in hell.

TIL: in Rust, adding a Drop impl to a type is a Major semver change which is globally visible; it can be observed even through opaque intermediate types. github.com/obi1kenobi/c...

Does using #rustlang really make your software safer? tweedegolf.nl/en/blog/152/...

RustWeek is almost sold out! Get your tickets now for the biggest #rustlang conference of 2025! 🦀 rustweek.org

We’re testing the rustup 1.28.2 release: internals.rust-lang.org/t/seeking-be...

You: add some @rust-lang.org std API libs team member, 1 year later: “.. strongly opposed ..”

I am planning to release Jiff 1.0, a datetime library for Rust, this summer. After that, I do not plan to make breaking changes, possibly indefinitely. I would LOVE LOVE LOVE more experience reports before stabilizing Jiff. Tell your friends. github.com/BurntSushi/j...

Sounds a lot like bloop.ai.

Surprising no one -- and especially not @djc.ochtman.nl -- we are going to be talking Lip-Bu Tan's ascension at Intel today. Join @ahl.bsky.social and me, 5p Pacific! discord.gg/QrcKGTTPrF?e...

async-std has been discontinued.

On Oxide and Friends this week, @bcantrill.bsky.social and I were joined by @djc.ochtman.nl and @steveklabnik.com to talk about the recent behavior change in rustup that broke a bunch of folks. But it's not a sad story, it's a success story! www.youtube.com/watch?v=zCTR...

@bcantrill.bsky.social do we get an episode on Tan next week? 😊

Oops, I did it again: the humantime maintainer (who is from the Ukraine, so understandably has other things to worry about) asked me to help out with maintenance. I've just published a 2.2.0 release and have submitted a PR to withdraw the unmaintained advisory. github.com/rustsec/advi...

Carefully but Purposefully Oxidising Ubuntu #rustlang discourse.ubuntu.com/t/carefully-...

Excited to be able to join Oxide & friends tomorrow!