5 ms·
> Open-source software—with exception of Caddy—never bothered to implement OCSP stapling properly. Apache with mod_md and Nginx with OpenSSL both do it quite w
by Avamander 2y ago
> Open-source software—with exception of Caddy—never bothered to implement OCSP stapling properly.
Apache with mod_md and Nginx with OpenSSL both do it quite well.
But stapling implementations like that haven't always existed.
Short-lived certificates seem an easier thing to implement than trying to resurrect that ecosystem by now.