• Vorpal@programming.dev
    link
    fedilink
    arrow-up
    4
    ·
    9 months ago

    My guess is that the relevant keyword for the choice of OpenSSL is FIPS. Rusttls doesn’t (or at least didn’t) have that certification, which matters if you are dealing with US government (directly or indirectly). I believe there is an alternative backend (instead of ring) these days that does have FIPS though.