rustls

Written in Rust, rustls eliminates entire classes of memory safety vulnerabilities common in C/C++ TLS implementations, as emphasized in its key features and value proposition.

Requires no configuration to achieve high cryptographic security and excludes obsolete features by default, preventing common misconfiguration pitfalls highlighted in the README's approach section.

Implements both TLS 1.2 and 1.3 for clients and servers, ensuring comprehensive coverage of current standards, as listed in the protocol features documentation.

The CryptoProvider system allows swapping cryptographic primitives for compliance or performance, with multiple first-party and third-party options detailed in the README, enhancing flexibility.