It's nice that they've enabled this on their servers, but it comes with some caveats at the moment. First, not all browsers support it. For example, no version

It's nice that they've enabled this on their servers, but it comes with some caveats at the moment. First, not all browsers support it. For example, no version of Firefox supports it at this time (see: https://bugzilla.mozilla.org/show_bug.cgi?id=360420 https://bugzilla.mozilla.org/show_bug.cgi?id=360420). Second, OCSP stapling was originally conceived for only the end entity cert. This means that if the browser wants to check intermediates for revocation that payload can't be stapled, but will still require an additional check. There are several in progress proposals (spearheaded by Opera) to resolve this, but it's not finalized yet. This negates some of the speed gain on browsers that do choose to do revocation checking with this level of rigor. But guess what, you can join the stapling party even if you aren't a CloudFlare customer! If you're using Apache (2.3+) you can configure OCSP stapling for your own website with the SSLUseStapling directive. nginx also plans to support stapling with the 1.3 release (initial preview released early this month). You can also do stapling with IIS 7.5+ on Windows. Edit: Others have asked what browsers currently support stapling. I believe only Opera and IE9+ (probably schannel in Win7, but possibly in Vista?) at this time. Chrome is publicly moving away from OCSP/CRL entirely in favor of aggregating that data themselves and pushing it down to clients via their own infrastructure, Firefox has that open bug, and Apple's roadmap for ocspd/securityd is obviously not known.