SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 HTTPS Open-Source Projects
-
Project mention: I got tired of setting up SSL for every side project, so I made a 60-second Docker deploy kit | dev.to | 2026-05-19
The secret is Caddy. Unlike Nginx, Caddy handles SSL automatically — it requests certificates from Let's Encrypt and renews them without any configuration. The entire reverse proxy config is 3 lines:
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
mkcert
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
On install it generates an ECDSA P-256 root CA at ~/.mkdev/ca/ (private key written 0o400, owner-read only) and installs it into the OS-native trust store. The trust-store integration — Keychain via security on macOS, the CA-bundle dirs plus update-ca-* on Linux, the ROOT store via crypt32.dll on Windows — is adapted from mkcert (BSD-3, credited in LICENSE-MKCERT). That layer is the genuinely OS-specific part and reusing it saved a lot of pain.
-
libcurl
A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, MQTTS, POP3, POP3S, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS. libcurl offers a myriad of powerful features
bagder merged a fix to curl in response to my report: https://github.com/curl/curl/commit/b079595f2e903b820a027a68...
Sorry for not believing you initially! I'm very surprised that was in there
-
nps
一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal. (by ehang-io)
-
Project mention: Go Web Frameworks in Production: Performance Benchmarks and Real-World Trade-offs | dev.to | 2026-03-19
Echo is a high-performance web framework that strikes an excellent balance between performance and features. It supports HTTP/2 out of the box and provides flexible middleware options.
-
Not ideal.
This appears to be fixed as of April (at least for Apache). [0].
[0] - https://github.com/nginx/nginx/commit/365694160a85229a7cb006...
-
-
gopeed
A fast, modern download manager for HTTP, BitTorrent, Magnet, and ed2k. Cross-platform, built with Golang and Flutter.
-
-
ecapture
Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
Project mention: PCAPdroid VS ecapture - a user suggested alternative | libhunt.com/r/PCAPdroid | 2025-10-07 -
I'd be more concerned about confusing it with https://github.com/sindresorhus/got, which is well-established (15k stars on GitHub is nothing to sneeze at).
-
-
hotel
🏩 A simple process manager for developers. Start apps from your browser and access them using local domains
-
libhv
🔥 比libevent/libuv/asio更易用的网络库。A c/c++ network library for developing TCP/UDP/SSL/HTTP/WebSocket/MQTT client/server.
-
bandit has been created as an alternative to cowboy, fully coded in Elixir and designed to be integrated and highly compatible with the Phoenix framework. When it came out few years ago, the community did a lot of noise and I never find a moment to test it. bandit supports HTTP/1.1 and HTTP/2 natively. WebSockets protocols support can be added with the help of WebSock and WebSockAdapter modules. At this time, it does not support HTTP/3 (yet?).
-
warpgate
Fully transparent SSH, HTTPS, Kubernetes, MySQL and Postgres bastion/PAM that doesn't need additional client-side software
Project mention: Warpgate 0.24 (a client-less bastion) adds a web SSH terminal | news.ycombinator.com | 2026-06-02 -
-
Project mention: When Reverse Proxies Surprise You: Hard Lessons from Operating at Scale | news.ycombinator.com | 2025-11-18
Very interesting read! But I want to point out a small correction - the DNS collapse issue at HAProxy also had some O(N^3) code paths, which is just mind-blowing.
Also, I believe this should be the correct GitHub issue link - https://github.com/haproxy/haproxy/issues/1404
> Production Lesson: Code that "works fine" at small scale may still hide O(N²) or worse behavior. At hundreds or thousands of nodes, those costs stop being theoretical and start breaking production.
-
I'm also using Reqable, for those interested check it out: https://reqable.com
-
Project mention: The privacy nightmare of browser fingerprinting | news.ycombinator.com | 2025-11-22
JA3/JA4 are useless now.
At best they identify the family of browser, and spoofing it is table stakes for bad actors. https://github.com/lwthiker/curl-impersonate
-
-
curl_cffi
Python binding for curl-impersonate fork via cffi. A http client that can impersonate browser tls/ja3/http2 fingerprints.
Project mention: Bing Search API Replacement: scrape SERP results for $1.05/1K | dev.to | 2026-05-311. TLS fingerprint inspection. Bing inspects the JA3/JA4 signature of your TLS handshake. Python's stdlib ssl, requests, and httpx emit fingerprints no real browser produces — the server returns 403 before reading the query string. We route every request through curl-cffi's AsyncSession, impersonating Chrome 131, Chrome 124, or Firefox 147 TLS + HTTP/2 SETTINGS frames at the socket level, rotating profiles per page to reduce burst correlation.
-
Project mention: LetsEncrypt – Expiration Notification Service Has Ended | news.ycombinator.com | 2025-06-30
It's unfortunate to see this go away, but understandable given the costs involved. If you use a web server like Caddy, you can automate certificate renewal (https://caddyserver.com/docs/automatic-https). If notifications are important, they also provide an event subscription system (https://github.com/caddyserver/certmagic#events) so you can subscribe to cert-related events, run custom code, trigger event handlers, etc.
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
HTTPS discussion
HTTPS related posts
-
Bing Search API Replacement: scrape SERP results for $1.05/1K
-
mkdev: trusted HTTPS for localhost, mapped by name
-
Using dio HTTP Client in Dart
-
Self-Signed Certificates for localhost Development
-
Docker basics: Using mkcert and caddy with docker compose to host web services over HTTPS for local development
-
Deploying Mercure alongside Caddy on a shared VPS
-
My minute-by-minute response to the LiteLLM malware attack
-
A note from our sponsor - SaaSHub
www.saashub.com | 12 Jun 2026
Index
What are some of the best open-source HTTPS projects? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | Caddy | 73,224 |
| 2 | mkcert | 58,813 |
| 3 | libcurl | 42,065 |
| 4 | nps | 34,065 |
| 5 | Echo | 32,430 |
| 6 | Nginx | 30,595 |
| 7 | nginxconfig.io | 28,288 |
| 8 | gopeed | 24,831 |
| 9 | cpp-httplib | 16,557 |
| 10 | ecapture | 15,221 |
| 11 | got | 14,915 |
| 12 | nginx-admins-handbook | 14,148 |
| 13 | hotel | 10,021 |
| 14 | libhv | 7,517 |
| 15 | cowboy | 7,504 |
| 16 | warpgate | 7,098 |
| 17 | gost | 6,913 |
| 18 | haproxy | 6,614 |
| 19 | reqable-app | 6,391 |
| 20 | curl-impersonate | 5,950 |
| 21 | AndroidNetworking | 5,905 |
| 22 | curl_cffi | 5,798 |
| 23 | certmagic | 5,565 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com