• draft-ietf-tls-esni-18 encrypted client hello (ECH) is now supported for client applications. See the ech-client.rs example for a complete end-to-end demonstration using DNS-over-HTTPS to retrieve a server's ECH configuration for building a Rustls ClientConfig using with_ech().
• Additional safety limits guarding against fruitless processing of small messages have been added. Rustls will now limit excessive warning-level alerts, post-handshake renegotiation attempts, key update requests, and empty plaintext fragments.
• FIPS mode has been updated to exclude X25519 key exchange.

What's Changed

• docs: add OpenSSF best practices badge by @cpu in https://github.com/rustls/rustls/pull/1985
• ROADMAP: check off cert compression by @ctz in https://github.com/rustls/rustls/pull/1987
• chore: Configure Renovate by @renovate-bot in https://github.com/rustls/rustls/pull/1984
• chore(deps): lock file maintenance by @renovate-bot in https://github.com/rustls/rustls/pull/1991
• Disable x25519 key exchange in fips mode by @ctz in https://github.com/rustls/rustls/pull/1993
• aws_lc_rs: fix unused import w/ no-std by @cpu in https://github.com/rustls/rustls/pull/1994
• Limit fruitless processing of small messages by @ctz in https://github.com/rustls/rustls/pull/1988
• fix lib.rs examples link by @bmw in https://github.com/rustls/rustls/pull/1995
• chore(deps): lock file maintenance by @renovate-bot in https://github.com/rustls/rustls/pull/1996
• Revert "ci: temp. pin nightly to 2024-05-22" by @cpu in https://github.com/rustls/rustls/pull/1998
• Encrypted Client Hello support (client only) by @cpu in https://github.com/rustls/rustls/pull/1718
• apply nightly formatting by @cpu in https://github.com/rustls/rustls/pull/2002
• ech: implement inner hello extension compression by @cpu in https://github.com/rustls/rustls/pull/2001
• v0.23.10 release preparation by @cpu in https://github.com/rustls/rustls/pull/2004

New Contributors

• @renovate-bot made their first contribution in https://github.com/rustls/rustls/pull/1984
• @bmw made their first contribution in https://github.com/rustls/rustls/pull/1995

Full Changelog: https://github.com/rustls/rustls/compare/v/0.23.9...v/0.23.10