···2424- `backend-rustix` is available as an alternate transport backend
2525- DNS mode is selected independently via `dns-getaddrinfo` or `dns-ip-only`
2626- Alternate DNS mode `dns-ip-only` rejects hostnames and only accepts literal IP hosts
2727-- HTTPS is optional via `--features https` and currently uses `TlsVerify::None` (insecure baseline)
2727+- HTTPS is optional via `--features https` and requires an RNG backend
2828+- HTTPS currently uses `TlsVerify::None` (insecure baseline)
2929+- RNG backends: `rng-dummy` (fixed seed), `rng-dev-urandom` (reads `/dev/urandom`), `rng-getrandom` (syscall)
2830- Uses fixed-size stack buffers for request/response and output chunks
2931- Performs best-effort low-allocation operation (no `String`/`Vec` in app code)
3032···3436# Default build: posix-libc backend + getaddrinfo DNS mode
3537cargo run -- http://example.com
36383737-# HTTPS on default backend/DNS mode
3838-cargo run --features https -- https://example.com
3939+# HTTPS with dev-urandom RNG (recommended for production)
4040+cargo run --no-default-features --features backend-posix-libc,dns-getaddrinfo,https,rng-dev-urandom -- https://example.com
4141+4242+# HTTPS with getrandom syscall RNG
4343+cargo run --no-default-features --features backend-posix-libc,dns-getaddrinfo,https,rng-getrandom -- https://example.com
4444+4545+# HTTPS with dummy RNG (testing only, insecure)
4646+cargo run --no-default-features --features backend-posix-libc,dns-getaddrinfo,https,rng-dummy -- https://example.com
39474048# Minimal DNS mode (literal IP hosts only)
4149cargo run --no-default-features --features backend-posix-libc,dns-ip-only -- http://93.184.216.34