I think this would be a good approach on many levels. It appears there is already an (expired?) internet draft for this: https://datatracker.ietf.org/doc/draf

I think this would be a good approach on many levels. It appears there is already an (expired?) internet draft for this: https://datatracker.ietf.org/doc/draft-pala-rea-ocsp-over-dns/ https://datatracker.ietf.org/doc/draft-pala-rea-ocsp-over-dn... http://tools.ietf.org/html/draft-pala-rea-ocsp-over-dns-00 http://tools.ietf.org/html/draft-pala-rea-ocsp-over-dns-00 But i could not find any browser support or even plugins. I guess all current development is behind DANE and/or multi-OCSP-stapling; second one has some chance of being deployed soon. https://bugzilla.mozilla.org/show_bug.cgi?id=611836 https://bugzilla.mozilla.org/show_bug.cgi?id=611836 https://datatracker.ietf.org/doc/rfc6961/ https://datatracker.ietf.org/doc/rfc6961/ --igor