Memory safe TLS in git

[kevinburke1]

Git uses libcurl for http:// and https:// fetches. If you are using a curl older than 7.34, then git will use OpenSSL to do IMAP fetches.

The recent change to add a rustls backend for curl - documented here: https://daniel.haxx.se/blog/2021/02/09/curl-supports-rustls/ - means that Git should use Rust for TLS as long as you are compiling in a libcurl that has been compiled with TLS, which should be possible on tip, or in version 7.76.0.

To do SSH transfers Git executes the "ssh" binary - it doesn't compile SSH in. The ssh binary on most machines is typically OpenSSH. I'm not sure if there is a Rust replacement for everything OpenSSH does.

[kevinburke1]

Maybe if you enabled the wiki I could start adding these there? Basically I'd like to track the progress of memory safe TLS in different popular pieces of software.