certmagic

> even using the same libraries for most of the functionality You're wrong. Caddy uses a superior library that's been more stress-tested at scale in production: https://github.com/caddyserver/certmagic and https://github.com/mholt/acmez - neither of which lego uses. Bugs and limitations in lego caused severe problems for several of our larger customers.

I kept running into DNS issues, and needed to triple-check that I was pointing to the right DNS servers, so I made this utility website that does exactly that: which-dns [1] This isn't a new idea ([2]), but mine supports https (hat tip to Matt Holt's certmagic [3]), is ad-free, and the source is available [4]. Let me know what you think! [1] https://which.nameserve.rs [2] http://www.whatsmydnsserver.com/ [3] https://github.com/caddyserver/certmagic [4] AGPL. It is my first foray into golang. https://github.com/redirect2me/which-dns

Caddy's TLS features are available in CertMagic (https://github.com/caddyserver/certmagic) for your daily Golang web app development. Highly recommended!

For our backend[1], - We are using the default test framework that comes with Go; go test. - We usually follow Postel's law which translated to Go, would be: `Accept interfaces, return concrete types`[2] This enables us to pass in fake interfaces during tests. I haven't checked what kind of performance cost(if any) we may be paying by passing around interfaces instead of concrete implementations; but performance has not been a problem so far so we are just happy with our approach. - We do not use any http web frameworks, we are just using stdlib's net/http. We pair that with certmagic[3] for automated TLS certificate issuance and renewal. I like the performance of Go, it is easy to pick up and it comes with a pretty great stdlib. What I do not like is the fact that it has nil pointers, and you tend to run into one or two nil pointer dere

> An edge web server should carry no knowledge of a concept of a cluster. Caddy doesn't. That's what's so interesting! > It should simply be able to ask something for a cert. It does. > I suggest the following path: Oh good! That's pretty close to how it actually works already! I'm happy to explain more how Caddy actually works before we start armchairing solutions here. Or, feel free to read the code for yourself: https://github.com/mholt/certmagic/