I was thinking about the impact of no OCSP to the greater PKI ecosystem; and a random thought hit me. Instead of sunsetting OCSP and switching to CRLs; why not force the Must Staple flag on every issued certificate? Here me out… The two big concerns are privacy of users and infrastructure costs fo…

Modest Proposal for Preserving OCSP

MikeMcQ August 17, 2024, 10:07pm 12

I did a similar test with same poor results using iPad Safari and Windows Edge.

4 Likes