C
Caddy
INFRA · APIS
Velocity0.0
Web server and reverse proxy with automatic HTTPS
Caddy 2.11's betas add ECH key rotation and a release process without its founder.
web-servertlsencrypted-client-helloopen-source-governancereverse-proxy
◆Current state
Caddy's tracked entries are the two 2.11 betas from December 2025 and January 2026. Beta 1 was the first release cut by the maintainer team's automated process without the original author, and brought time-based log rolling, argon2id basic auth and named socket activation. Beta 2 added ECH key rotation, multiple intermediates in PKI signing chains and a fix for the ZeroSSL issuer.
◆Where it's heading
Caddy is investing in privacy-preserving TLS through Encrypted ClientHello, and in project continuity through a team-run release pipeline. The rest of the betas are edge-case fixes, consistent with a mature server polishing details.
◆Prediction
The beta notes point to a 2.11 stable release; no newer entries are tracked, so its timing isn't visible here.
◆Recent moves
- 9mo ago
Caddy 2.11 beta 2 adds ECH key rotation
Beta 2 adds ECH key rotation, which beta 1 listed as a release blocker, plus multiple intermediates in signing chains and a ZeroSSL issuer fix. It clears the stated prerequisite for 2.11 stable.
View source ↗ - 10mo ago
Caddy 2.11 beta 1: first team-run release, argon2id, log rolling
Beta 1 was the first Caddy release shipped by the maintainers' automated process without the original author, and adds time-rolled logs, argon2id basic auth and named socket activation. The governance change matters more than the features for long-term adopters.
View source ↗