Comparison of SSL Labs TLS scores with different Go versions

TL;DR

SSL Labs TLS scores for Go webservers:
Go Version Score
1.4.3 C
1.5.3 A-
1.6rc1 A

Introduction

Somehow, this made it into Golang Weekly.
This was a surprise to me -- only found out when I received my weekly e-mail.
It's in issue #95, here

I was asked in this thread to provide a comparison of SSL Labs TLS scores for an web server written in Go, compiled with different versions of Go.

The results follow. The versions of Go used were:


The code

Just your most boring example:
package main

import (
	"log"
	"net/http"
)

func main() {
	http.HandleFunc("/", index)
	log.Fatal(http.ListenAndServeTLS(":443", "cert.pem", "key.pem", nil))
}

func index(w http.ResponseWriter, r *http.Request) {
	w.Write([]byte("Hello, and welcome!"))
}

Go 1.4.3

score
full report

Go 1.5.3

score
full report

Go 1.6rc1

score
full report