search

rustls / futures-rustls

Apache License 2.0
13 stars 7 forks source link

Switch to rustls-webpki #5

Closed MOZGIII closed 1 year ago

MOZGIII commented 1 year ago

As per https://rustsec.org/advisories/RUSTSEC-2023-0052 webpki is vulnerable, but it is also unmaintained. Better switch to rustls-webpki.

quininer commented 1 year ago

Don't worry, futures-rustls itself does not use webpki crate, it only exists in test dependencies.

MOZGIII commented 1 year ago

It also seems like it already uses rust-webpki, my bad. I'll have to file an issue with the other dependency of mine, thx!