- Upgrade to Go 1.12 and enable TLS 1.3 by default, removing CBC ciphers from the default suite.
- Allow HEAD requests for static files and improve the organization of startup output.
- Better handling of empty ACME email addresses and require explicit cipher configuration to re‑enable TLS 1.0/1.1.