2 years ago

Category: Software, Security, Microsoft, android

The Internet Security Research Group (ISRG) is best known for its Let’s Encrypt certificate authority, but it has also turned its hand to fixing memory problems. It sponsors, via Google, so Miguel Ojeda, a Linux kernel developer to work full time on Rust in Linux in no small part to fix its built-in C memory problems.

Prossimo’s answer is to replace our existing network programs with ones written in memory-safe languages that will eliminate this entire class of issues.

Rustls, in turn, is meant to be a drop-in replacement for the ubiquitous OpenSSL.

Our hope is that we can get people to fully recognize the risk and view memory safety as a requirement for software in security-sensitive roles.”