🚨 This fork is offered as-is, and without guarantees. It is expected that changes in the code, repository, and API occur in the future. We recommend to take caution before using this library in production.
This is an experimental fork of Go, that patches the TLS stack, to support:
- Encrypted ClientHello (ECH)
- Post-quantum key agreement
- Delegated Credentials
- Post-quantum certificates.
- Configuraton of keyshares sent in ClientHello with
tls.Config.ClientCurveGuess.
To use upstream Go and this fork with the same codebase, this fork sets the cfgo build tag.
$ git clone https://github.com/cloudflare/go
$ cd go/src
$ ./make.bash
You can now use ../bin/go as you would regular go.