Go does a great job of getting a good SSL Labs Score out of the box, however I thought it would be interesting to see what would be needed to achieve the perfect score, getting 100% in all categories and not just a boring A.
There are plenty of guides around that demonstrate how to do this with NGINX or Apache, but there seems little that explains what is required for a typical Go app.
Qualys have a detailed guide that is very clear about how you can improve your score. I’ll refer to various sections, however you can check it out yourself here.
First of all, let’s see what Go scores with default configuration.