There is still a non-trivial privacy issue with the OCSP checks although OCSP stapling does address that problem. The Chrome situation does leave something to

There is still a non-trivial privacy issue with the OCSP checks although OCSP stapling does address that problem. The Chrome situation does leave something to be desired although I can sort of understand where they were coming from from the aspect of it being confusing. It is worth noting that only the setting on the settings page has been removed. You can still enable OCSP checks and OCSP forcing through the enterprise settings[1][2]. Also worth noting is that I believe they have only disabled OCSP checks, OCSP stapling should still work correctly if the server supports it. [1] https://www.chromium.org/administrators/policy-list-3#EnableOnlineRevocationChecks https://www.chromium.org/administrators/policy-list-3#Enable... [2] https://www.chromium.org/administrators/policy-list-3#RequireOnlineRevocationChecksForLocalAnchors https://www.chromium.org/administrators/policy-list-3#Requir...