Consider using rustls
as default instead of native-tls
Hi
Currently we default to native-tls
instead of rustls
. I'd like to open a discussion to determine if this is the correct approach.
First I am curious to why we decided to default to native-tls
.
Then I'd like to list some advantages of rustls
:
- More secure (Rust code, doesn't use insecure TLS versions,...)
- If a user's system has compromised root certificates, Arti would use it when using
native-tls
? -
rustls
is more portable (I personally often encounter issues when using Arti libraries withnative-tls
while they work fine withrustls
).
Considering this, isn't rustls
more suitable as default TLS library instead of native-tls
?
See this Rust forum post as reference: https://users.rust-lang.org/t/rustls-vs-nativetls/131051
Issue created regarding: !2941 (comment 3222879)