Consider using rustls as default instead of native-tls
Hi
Currently we default to native-tls instead of rustls. I'd like to open a discussion to determine if this is the correct approach.
First I am curious to why we decided to default to native-tls.
Then I'd like to list some advantages of rustls:
- More secure (Rust code, doesn't use insecure TLS versions,...)
- If a user's system has compromised root certificates, Arti would use it when using
native-tls? -
rustlsis more portable (I personally often encounter issues when using Arti libraries withnative-tlswhile they work fine withrustls).
Considering this, isn't rustls more suitable as default TLS library instead of native-tls?
See this Rust forum post as reference: https://users.rust-lang.org/t/rustls-vs-nativetls/131051
Issue created regarding: !2941 (comment 3222879)