3 ms·
> You wouldn't like it if Firefox did an online check with a central authority for every website you visited And yet OCSP stapling is still far from ubiquitous
by marginalia_nu 3y ago
> You wouldn't like it if Firefox did an online check with a central authority for every website you visited
And yet OCSP stapling is still far from ubiquitous.
- jraph 3y agoI wonder how much this has to do with OCSP stapling being so badly implemented in Apache 2 and nginx (don't know about the other servers). This article from 2009 [1] still seems current, at least I can attest that I still have issues with nginx. Also this super user Q&A [2] which suggest priming OCSP with a cron job because nginx does not do its job by itself. [1] https://blog.apnic.net/2019/01/15/is-the-web-ready-for-ocsp-must-staple/ https://blog.apnic.net/2019/01/15/is-the-web-ready-for-ocsp-... [2] https://superuser.com/questions/1635407/ocsp-not-working-consistently-with-nginx/1658644#1658644 https://superuser.com/questions/1635407/ocsp-not-working-con...