Prossimo

A great win for moving to memory safety! Congratulations, Mozilla Firefox and Trifecta Tech Foundation!

Three years ago, we kicked off an effort to rewrite sudo and su in Rust — two utilities that mediate a critical privilege boundary on nearly every open-source operating system that runs the Internet. Last week, sudo-rs became the default sudo implementation in Ubuntu LTS Resolute Raccoon. Trifecta Tech Foundation, who took over stewardship of sudo-rs in 2024, just published a thoughtful three-year retrospective on the project. This is exactly the kind of long arc we hope to see for Prossimo's initiatives: incubation, durable stewardship, real-world adoption, and ongoing collaboration with the maintainers of the software being replaced. Thanks to the Trifecta Tech Foundation team, Tweede golf, Ferrous Systems GmbH, NLnet foundation, Sovereign Tech Agency, Canonical, Amazon Web Services (AWS) and everyone who has contributed. The full retrospective is well worth reading: https://lnkd.in/eCSW2ZDu

Almost three years ago, sudo-rs was announced to the world. Just last week, it became the default sudo utility in the Ubuntu LTS release Resolute Raccoon. Now is a good time to reflect: https://lnkd.in/eCSW2ZDu - We've reduced attack surface more than we had initially planned to do - We've dealt with bugs, and are proud of the way we handled them - We've seen sudo-rs adopted by large and small distros and are hopeful and ready for more 🙏 Thanks to all supporters, adopters and contributors thus far! Canonical Jon Seager Tweede golf Internet Security Research Group (ISRG) Josh Aas Prossimo Sarah Gran (Saline) Ferrous Systems GmbH NLnet foundation Sovereign Tech Agency Amazon Web Services (AWS) Ministerie van Binnenlandse Zaken en Koninkrijksrelaties #rustlang

Congratulations to Trifecta Tech Foundation and Canonical on this important step forward in improving memory safety!

We published our latest Rustls performance benchmarks, comparing Rustls against OpenSSL and BoringSSL across a range of performance-critical functions. The results are encouraging. Rustls placed first in 14 of 16 tests, with modest speed improvements since our last report in July 2025 — likely due to updates in the underlying aws-lc-rs cryptography library. One area we're actively developing for Rustls 0.24 is "split mode" — the ability to split a connection, post-handshake, into separate sender and receiver objects that can operate on independent threads. The practical effect is the potential to roughly double throughput for a single connection. We'll be validating that in a future performance report. The full benchmark results and methodology are available at https://lnkd.in/eJtFJtqt #Rust #memorysafety #security #performance #TLS

We are honored to announce that craigslist founder Craig Newmark has contributed $100,000 to ISRG for 2026, marking our fourth year of partnership. A longtime software developer and pioneer in "Cyber Civil Defense," Craig’s consistent support has been a significant factor in helping ISRG advance our work for better security and privacy. For example, his support has, helped us achieve major milestones in memory safety: sudo-rs: Memory safe implementation is now the default in Ubuntu. Rustls: Developing a high-performance TLS library. Hickory DNS: Moving toward at least one large-scale production by mid-2026. In the world of nonprofit cybersecurity, it’s rare to find a philanthropist so passionate about the infrastructure of the internet. We are grateful for Craig’s continued trust as we build a more resilient digital world. #security #memorysafety #cybercivildefense #rustls #sudu #DNS #take9

We were excited to see that sudo-rs, a memory safe version of sudo whose development we supported, was adopted by default in Ubuntu 25.10. Check out this recent interview with Canonical VP of Engineering Jon Seager about why they made this move: https://lnkd.in/gXPxv5pZ Thanks to the folks behind Ubuntu, the Trifecta Tech Foundation, which has taken on long-term maintenance of sudo-rs, and Todd Miller, the maintainer of the original sudo, who has been a great partner. #sudo #memorysafety #rust #ubuntu

Sudo-rs maintainer Marc Schoolderman was invited to the 2025 Ubuntu Summit to talk about the design choices that shaped sudo-rs. Watch the talk here: https://lnkd.in/e6zxpxCm Canonical #rustlang

We are thrilled to see that the #rustls TLS library and its creator, Joe Birr-Pixton have been short-listed for the OpenUK Annual Awards. Rustls is a first-in-class library with great performance and memory safety. It certainly deserves a spot at center stage for the "Oscars of Open Source." https://openuk.uk/awards/

Can you add any of these to your 2026 engineering plans? ✅ Rustls (memory safe TLS) ✅ ndpd-rs (memory safe Network Time Protocol implementation) ✅ HickoryDNS (memory safe DNS resolver) Learn more: https://lnkd.in/e774_M3