That is a big potential issue, but really, you can deploy a standalone binary written in go within 2 minutes that supports the state of the art(minus perhaps so

That is a big potential issue, but really, you can deploy a standalone binary written in go within 2 minutes that supports the state of the art(minus perhaps some subtle but important fixes) in TLS. If not anything else, that is pretty damn cool. Like the other fellow said, it's not as though fixes to attacks will not be accepted into the language.