Go's TLS stack is very nice but beware of the default tlsConfig (containing insecure 3DES and RC4 algorithms): https://wiki.mozilla.org/Security/Server_Side_TLS

Go's TLS stack is very nice but beware of the default tlsConfig (containing insecure 3DES and RC4 algorithms): https://wiki.mozilla.org/Security/Server_Side_TLS#Go https://wiki.mozilla.org/Security/Server_Side_TLS#Go Also, it might be vulnerable to side-channel timing attacks: https://www.imperialviolet.org/2013/02/04/luckythirteen.html https://www.imperialviolet.org/2013/02/04/luckythirteen.html