llrt
llrt copied to clipboard
Http module should offer native roots as an alternative to webkpi-roots
Right now we use webkpi-roots, but we should also offer the native roots since some environments might prefer that. We can use a feature flag, should be easy to add. See https://github.com/rustls/rustls-platform-verifier?tab=readme-ov-file#deployment-considerations
Agree! PR welcome!
@richarddavison @Sytten I already have a version of this that works on my laptop. The last thing I need to decide is which one to make the default. In terms of security and small crate size, rustls-platform-verifier seems to have the advantage.