rustls

Implemented in Rust, it eliminates common memory safety vulnerabilities like buffer overflows, as emphasized in the Key Features.

Requires no configuration to achieve strong cryptographic security and excludes obsolete features, aligning with its philosophy of security as the default.

Supports multiple cryptography providers via the CryptoProvider trait, allowing customization for specific needs, as detailed in the Cryptography providers section.

Fully supports TLS 1.2 and TLS 1.3 for both client and server roles, ensuring up-to-date security standards.

Used in production by many organizations, with active maintenance, benchmarks, and a clear roadmap, as stated in the Status section.