Home › Compare
goTLS vs the alternatives
Lots of tools promise HTTPS for a local or private IP. They differ on three things that actually matter: is the certificate trusted everywhere with no setup, does the private key stay secret, and does your traffic stay on your network. Here is how the common options line up.
| goTLSkeyless proxy | traefik.mepublished key | nip.io / sslip.ioDNS only | ngrok / tunnelspublic tunnel | mkcertlocal CA | Let's Encryptown domain | |
|---|---|---|---|---|---|---|
| Trusted cert, no root-CA install | ✓ | ✓ | ✗no TLS | ✓ | ✗install CA per device | ✓ |
| Works for any private / LAN IP | ✓ | ✓ | ✓ | ✗gives a public URL | ✓ | ✗public host only |
| Private key never published | ✓ | ✗key is public | – | ✓ | ✓ | ✓ |
| Traffic never leaves your network | ✓ | ✓ | ✓ | ✗proxied via their edge | ✓ | ✓ |
| No account / signup | ✓ | ✓ | ✓ | ✗ | ✓ | ✓ |
| No domain of your own needed | ✓ | ✓ | ✓ | ✓ | ✓ | ✗ |
| Exposes a local service to the internet | ✗by design | ✗ | ✗ | ✓its whole job | ✗ | ~ |
✓ yes ✗ no ~ partial / n/a. The last row is a different job, not a scorecard: goTLS deliberately does not tunnel your service to the public internet — it gives valid HTTPS on the IP you already reach.
Deep dives
Each page is a side-by-side comparison and explaining when other tools are a better pick.
traefik.me
Same magic-DNS trick. But traefik.me published its wildcard private key, which is why it kept getting revoked. goTLS never publishes a key.
Read the comparison → goTLS vsnip.io & sslip.io
Wildcard DNS only. You still have to solve the certificate yourself. goTLS adds valid, trusted HTTPS on top.
Read the comparison → goTLS vsngrok & tunnels
Tunnels expose localhost to the public internet through their edge, which sees your plaintext. goTLS keeps traffic local.
Read the comparison → goTLS vsmkcert
mkcert installs a private CA on every device that must trust it. goTLS certs are publicly trusted with zero install.
Read the comparison →Try it in one command
Point the keyless proxy at your service and open the magic URL. No account, no key on your box.