> How much of a security and performance increase is there to gain with it? The time it takes to establish a TCP connection to an OCSP responder, send a query,

> How much of a security and performance increase is there to gain with it? The time it takes to establish a TCP connection to an OCSP responder, send a query, wait for a response, parse it and close the TCP connection. I think it's fair to say a few hundred milliseconds at the very least.