2 ms·
Why can't OCSP scale? Doesn't stapling help a lot with that?
by dale_glass 3y ago
Why can't OCSP scale? Doesn't stapling help a lot with that?
- brohee 3y agoStapling works, but is a lot more useful if it is mandatory (which it is not). OCSP as intended in the early 2000s where the client query the CA is a non starter, the hosting cost would be such that not only free certificates would end but the paying one would be much more expensive. I think most people will find short lived certificates more convenient than mandatory OCSP stapling.