Sunsetting of OCSP in favor of older technology?

There is no argument against stapling.

The issue is having browsers query the ocsp endpoint leaking fqdn and IP address to the CA. This is not a headache anybody wants in a post-gdpr world, see:

5 Likes