Hi Guys,

> Firefox will most likely move to OCSP stapling only in the next 3 to 6
> months. Classic OCSP is too slow, and too error prone.

FYI, Chrome does not do classic OCSP as well, but with the recent
heartbeat openssl bug, OCSP stapling in combination with a
"OCSP Must Staple" may be what comes next (see [1] + [2]).


Regards,

Lukas


[1] https://www.imperialviolet.org/2014/04/19/revchecking.html
[2] https://tools.ietf.org/html/draft-hallambaker-muststaple-00

                                          

Reply via email to