llrt icon indicating copy to clipboard operation
llrt copied to clipboard

Http module should offer native roots as an alternative to webkpi-roots

Open Sytten opened this issue 1 year ago • 1 comments

Right now we use webkpi-roots, but we should also offer the native roots since some environments might prefer that. We can use a feature flag, should be easy to add. See https://github.com/rustls/rustls-platform-verifier?tab=readme-ov-file#deployment-considerations

Sytten avatar Jan 03 '25 17:01 Sytten

Agree! PR welcome!

richarddavison avatar Jan 05 '25 12:01 richarddavison

@richarddavison @Sytten I already have a version of this that works on my laptop. The last thing I need to decide is which one to make the default. In terms of security and small crate size, rustls-platform-verifier seems to have the advantage.

nabetti1720 avatar Jun 02 '25 14:06 nabetti1720