Interesting that you mention heartbleed while also claiming that Go implementing its own TLS library was a bad move. fyi, the popular Heartbleed test used a modified Go TLS stack - [1]. Clearly having an alternate implementation that was easy to work with was a win here.<p><a href="https:&#x2F;&#x2F;filippo.io&#x2F;Heartbleed&#x2F;" rel="nofollow">https:&#x2F;&#x2F;filippo.io&#x2F;Heartbleed&#x2F;</a>