@icing curious they mention rustls. rustls is based upon ring, which has a security policy of full disclosure and no means of privately reporting issues.
> While Rustls itself is platform independent, by default it uses aws-lc-rs for implementing the cryptography in TLS. See the aws-lc-rs FAQ for more details of the platform/architecture support constraints in aws-lc-rs.
>
> ring is also available via the ring crate feature: see the supported ring target platforms.