Skip to content

Commit b8598da

Browse files
update readme to remove production warning
1 parent a625d9c commit b8598da

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,9 +9,9 @@
99

1010
[RustCrypto]-based provider implementation for version 0.23 of [rustls], maintained by the RustCrypto organization.
1111

12-
## ️USE THIS AT YOUR OWN RISK! DO NOT USE THIS IN PRODUCTION⚠️
12+
## ️CAUTION⚠️
1313

14-
Not only that this is incomplete that only few selected TLS suites implemented (it should be well enough to cover 70% of the usage), but the elephant in the room is that neither did rustls nor RustCrypto packages were formally verified and certified with FIPS compliance.
14+
While a basic test suite that tests all available cipher suites and key exchange combinations passes, and it is cross-validated with OpenSSL, and is also running in ESP32 for experimental (but near-production) secure communication, please be reminded that (as of 2024) not all RustCrypto packages are formally verified and optimized for specific architecture, and none of the packages in RustCrypto are certified with FIPS compliance.
1515

1616
Note that RustCrypto performance is generally inferior than ring, but in exchange you got a pure Rust implementation that theoretically compiles everywhere Rust was ported to. In our case, we need to have `std` but foundational support for future `no_std` expansion is already here.
1717

0 commit comments

Comments
 (0)