News › security
By Zayden R., September 7, 2026
Rustls 0.23.44 now enables post-quantum secure ML-DSA certificates by default, enhancing security against future quantum threats. This release also restricts SSL key log file permissions, emphasizing security improvements.
Rustls, the modern TLS library written in Rust, has just released version 0.23.44, and it comes with a significant security enhancement. The new release enables post-quantum secure ML-DSA certificates by default, which is a big deal for engineers concerned about future-proofing their cryptographic systems. The use of ML-DSA (Module-Lattice-Based Digital Signature Algorithm) is gaining traction as a replacement for traditional RSA and ECDSA, thanks to its fast key generation and verification speeds, coupled with its resilience against potential quantum computer attacks.
While ML-DSA certificates aren't yet supported in the public web PKI, they are well-suited for private certificate hierarchies, making this update particularly relevant for organizations that manage their own internal PKI. By defaulting to ML-DSA, Rustls is positioning itself as a forward-thinking TLS solution, catering to those who are already planning for the post-quantum era.
Another important change in Rustls 0.23.44 is the adjustment of SSL key log file permissions. The log file is now restricted to be read-only by the file owner, enhancing the security posture by minimizing the risk of unauthorized access. This change might seem minor, but for sysadmins and security engineers, it's a welcome layer of protection.
For those eager to explore these updates, the new version is available on GitHub. Engineers should consider testing their systems with this latest release, particularly if they're invested in maintaining a robust cryptographic infrastructure that anticipates future threats.