If you're using Firefox, set security.OCSP.require to true. There is also UI for it under Preferences -> Advanced -> Encryption -> Validation -> When an OCSP co

If you're using Firefox, set security.OCSP.require to true. There is also UI for it under Preferences -> Advanced -> Encryption -> Validation -> When an OCSP connection fails, treat the certificate as invalid. I don't know whether it protects against all OCSP attacks but it's obviously better than the default option.