Using HTTP/2 Cleartext for a server in Go 1.24 | Hacker News
TL;DR AI
2 min readKey summary
A Go maintainer updated rclone after a vulnerability warning flagged the h2c HTTP/2 cleartext package.
A later linter check in Go 1.24 marked the package as deprecated, prompting its removal.
The post highlights how govulncheck, CI, and linters are pushing Go projects toward safer, newer code.
It also shows the tradeoff: better security signals, but more maintenance work for developers.



