NCC Group's Cryptography Services audits our Go TLS 1.3 stack

https://blog.cloudflare.com/ncc-groups-cryptography-services-audit-of-tls-1-3/