8 ms·
Can't open apps on macOS: an OCSP disaster waiting to happen
- LinuxBender 6y agoNot just CRL lists, but also OCSP stapling and caching can reduce load and dependency on OCSP infrastructure. I know who set up Apple's OCSP infrastructure, so I know it was done right. It's on the app/OS developers to cache the responses locally, to disk and persist after reboots until the file has aged beyond {n} time.