Skip to content

Conversation

@Jake-Shadle
Copy link
Member

Updates reqwest to 0.13.

reqwest has now changed the default TLS backend from native-tls (bad) to rustls (good), but defaults crypto to aws-lc-rs (bad) instead of ring (good). I despise aws-lc-rs and would never wish to force it on end users, so this change also means that tame-index now takes a hands off approach to TLS entirely. This increases the burden on the end user to properly configure their Client before passing it to tame-index, which is unfortunate, but should be healthier in the long run.

I've added a tls.rs example using webpki-roots with rustls. End users who wish to use aws-lc-rs, or native-tls, can figure that out themselves.

@Jake-Shadle Jake-Shadle merged commit 62cf520 into main Jan 7, 2026
8 checks passed
@Jake-Shadle Jake-Shadle deleted the update-reqwest branch January 7, 2026 16:34
@Jake-Shadle Jake-Shadle mentioned this pull request Jan 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant