3 ms·

I also love OCSP stapling but there are some limitations: - webserver need to implement it - admin need to enable it - webserver need internet access Maybe the

• coffee-- 4y ago
  Firefox Telemetry shows Beta 104 users encountered stapling on 13.95% of TLS handshakes. [1] The stapling telemetry is no longer turned on in Release [2], and even if it were, you have to do special things to look at Release data, but some years back (~2018 maybe?) I remember Release stapling was substantially lower than the more tech-savvy Beta and Nightly populations. Which is pretty normal, as tech-oriented sites are more likely to turn on advanced features. [1] https://telemetry.mozilla.org/new-pipeline/dist.html#!cumulative=0&end_date=2022-08-18&include_spill=0&keys=__none__!__none__!__none__&max_channel_version=beta%252F104&measure=SSL_OCSP_STAPLING&min_channel_version=nightly%252F55&processType=*&product=Firefox&sanitize=1&sort_by_value=0&sort_keys=submissions&start_date=2022-07-25&table=0&trim=1&use_submission_date=0 https://telemetry.mozilla.org/new-pipeline/dist.html#!cumula... [2] "prerelease" https://probes.telemetry.mozilla.org/?search=stapl&view=detail&probeId=histogram%2FSSL_OCSP_STAPLING https://probes.telemetry.mozilla.org/?search=stapl&view=deta...