4 ms·
Would requiring OCSP stapling fix 1 without the privacy concerns?
by thayne 5y ago
Would requiring OCSP stapling fix 1 without the privacy concerns?
- tialaramex 5y agoIn the sense that you, as the owner of a name, can choose to have your certificate say it must always be presented with OCSP stapling, and thereby your certificate can have revocation that works without privacy concerns? Yes. But for the larger global problem, OCSP stapling is a solution in the same sense that "Don't dig up any more coal, oil or gas" is a solution. Yes, I urge you to do this in both cases. It's a good idea. But, is everybody going to do it tomorrow? Next year? In my lifetime?
- thayne 5y agoI mean if browsers started doing something like marking sites that didn't have OCSP stapling as potentially insecure, or otherwise pushed for it.