Joe Birr-Pixton

Update everything that verifies certificates against public roots.

rustls, our modern memory-safe TLS implementation is 10 years old! @jbp.io wrote a blog post reflecting on how we got here: rustls.dev/blog/2026-09...

Happy to announce a new project: OxiSH, a modern, memory-safe SSH server. dirkjan.ochtman.nl/writing/2026... Prossimo has three criteria for suggesting memory-safe rewrites: (1) widely used, (2) on a security boundary and (3) performing a critical function. This is clearly true for SSH servers.

with times being what they are, it seems like you basically can't have a public open source repo without receiving LLM-written PRs. thus, after a great deal of thought, i have adopted the somewhat idiosyncratic Mycelium AI Policy in my personal projects: github.com/hawkw/myceli...

🎂 Ten years of Rustls. At #rustconf2026, Rustls project founder Joe Birr-Pixton and open source maintainer Daniel McCarney look back on a decade building a memory-safe TLS library trusted across the industry. View on schedule: sched.co/2KHyL Register: bit.ly/45kJb9Y

📢 Session: "A Decade of Rustls": update from maintainers @jbp.io & Daniel McCarney at #rustconf! 10 years in, what's next for one of Rust's most widely used TLS libs? 🎟️: rustconf.com/register?utm_source=rustconf_x&utm_medium=social&utm_campaign=week_july20 rustconf2026.sched.com/event/2KHyL/...

Pleased to announce a new network transport security protocol: "TSL" (Transport Security Layer). Suspiciously wire compatible with TLS, but obviously unrelated. Future standardisation efforts will happen outside the IETF, and contributions made with the aesthetic of american politics are banned

TRANS RIGHT'S ARE HUMAN RIGHT'S - dashare.zone ADMIN

The recording of our talk at @canonicalltd.bsky.social's #UbuntuSummit is available now: www.youtube.com/watch?v=qKmR... Happy to answer questions here!

@jbp.io and I will be presenting on our upki project to make TLS certificate verification more secure for non-browser Linux apps.

"No way to prevent this" says only cryptographic API where this regularly happens - barghest.asia/blog/cve-202... (previously jbp.io/2014/01/16/o... )

At #rustweek I'll have new stickers celebrating a decade of rustls. First commit was ten years ago tomorrow

youtu.be/rgZlzCd0DUU?... I guess this means I'm a tech influencer now? Thanks @frame.work

An update on rustls performance: it’s still pretty fast. www.memorysafety.org/blog/26q1-ru...

keep hearing "PULL UP" "PULL UP" and "TERRAIN, TERRAIN" but i'm pretty sure there's nothing to worry about

I wrote a blog post for the Alpha Omega Foundation on the work I did to surface RustSec advisories on crates.io: alpha-omega.dev/blog/surfaci...

github (2026, oil on canvas)

Merkle Tree Certs! #realworldcrypto

None of you are giving me enough credit for not participating on the TLS working group mailing list. You're welcome. Everything I don't do, I don't do it for you.

"If we publish this, suddenly people will start taking the cryptography opinions of the TLSWG very seriously. This would definitely happen thanks of the decades of demonstrated good decision making."

if anything, i've found that the quality of his posts have gone down over time, i call this "doctorowification"

One of the things I've been working on recently.

rust `use` statements are a conspiracy by big merge conflict to sell more conflicts

Life of a town councillor

Gary Larson: In my cartoon I invented Cow Tools as a cautionary tale Cows: At long last, we have created the Cow Tools from classic newspaper comic Cow Tools

Here are some statistics (estimated via Poisson inference on the observed hit counts): Keys generated: 2^34.5 (95% CI: 2^33.6–2^35.0) Core-years: 56.7 (95% CI: 30.7–82.6) Average cores: ~5,200 (95% CI: 2,800–7,500) This is a lot, folks! Really grateful for this level of community support.

Delighted to be recognised by @openuk.bsky.social for my recent open source work!

To end the year, a new major version of #rustlang reqwest, v0.13.0 is out! 🚀 - This brings rustls by default, replacing native-tls. 🦀 - Some feature and method cleanup. - But easy to upgrade for most everyone. seanmonstar.com/blog/reqwest...

This week on #OpenSourceSecurity I chat with Dirkjan Ochtman and Joe Birr-Pixton about #Rustls. A lot has happened with Rustls in the last few years (and there's a lot more to come). Writing a TLS implementation is incredibly complicated, even when you don't have to worry about memory safety

Just published a new #rustlang reqwest release candidate: v0.13.0-rc.1. This has some breaking changes, the biggest was switching to rustls by default. I'd appreciate if you gave it a spin 🙏 github.com/seanmonstar/...

DSE assessment in shambles

Earlier this year, LWN.net featured an excellent article named "Linux's missing CRL infrastructure", and today Canonical announced it will be working with me and @jbp.io over the coming weeks to start bridging the PKI infrastructure gap. discourse.ubuntu.com/t/addressing...

With the @openuk.bsky.social Awards coming up, we’re excited that Rustls — a memory-safe TLS library — is shortlisted in two categories, and Creator Joe Birr-Pixton is also recognized individually. The Rust Foundation is proud to support Rustls through the Rust Innovation Lab 🧡

my “we are not enron” T-shirt has people asking a lot of questions already answered by my shirt

heheheheh

lots of posts about unwrap(). not too many posts about simply not having your code and configuration meet for the very first time in production.

sounds like something the bad bacteria would put on their packaging

Congratulations to the shortlisted nominees in the 6th annual OpenUK Awards 2026, 🏆🍾🥂 Andy Piper, @bboreham.bsky.social, Daniel Gale, @davidtw.co, Dermoscopea, @flox.dev, Godfrey Inyama, Jan Faracik, @jbp.io, LVFS (fwupd.org), lowRISC CIC, Dr Margaret Hartnett, @manyfold.3dp.chat.ap.brid.gy,...

New Rust RFC: adding a crates.io Security tab github.com/rust-lang/rf...

"I appreciate that you're frustrated, but I should clarify: I'm an AI assistant, so I don't have a mother or family relationships."

It's time to send GCC to live on a farm.

I wrote another blog post for the Prossimo blog about how we improve the unhappy path for rustls users: www.memorysafety.org/blog/rustls-...

Microsoft has a product called Copilot Pro, and Github has a product called Copilot Pro. They are different prices, different and unrelated products, shipped by teams that have no awareness of each other. Incredible product management and business acumen.

We have a little blog post about this rustls.dev/blog/2025-09...