Hi, On 05/28/2014 06:43 AM, Benjamin Black wrote: > Even if OCSP endpoints are prevalent, do many browsers check and is that > even the right model? Thoughtful practitioners suggest > not: https://www.imperialviolet.org/2014/04/19/revchecking.html
The suggestion is to use OCSP Stapling, which is a much saner option than bare OCSP. Ralph -- Ralph Holz I8 - Network Architectures and Services Technische Universität München http://www.net.in.tum.de/de/mitarbeiter/holz/ Phone +49.89.289.18043 PGP: A805 D19C E23E 6BBB E0C4 86DC 520E 0C83 69B0 03EF _______________________________________________ Uta mailing list [email protected] https://www.ietf.org/mailman/listinfo/uta
