- On Demand TLS added to obtain certificates during handshakes, with configurable max‑certs limit and rate‑limiting safeguards.
- Caddy rebuilt on Go 1.6, includes SHA‑384 cipher suites, bulk certificate loading from a directory, and renews managed certificates 30 days early.
- New support for fastcgi scheme prefixes, markdown definition lists, insecure HTTPS and Unix‑socket backends in proxy, 2xx/4xx rewrite status codes, .Markdown template action, and .Truncate negative‑length behavior, plus assorted bug fixes.