I've talked about OCSP Stapling in the past and more recently about the new Must-Staple flag you can set in your certificates, but there's a bit of a problem. To go from not implementing Must-Staple straight to implementing it without any testing to see if you're ready is a bit…
Tag: OCSP Expect-Staple
Total 2 Posts
OCSP Expect-Staple is a new reporting mechanism to allow site owners to monitor how reliable their OCSP Stapling implementation is. With live feedback coming direct from the browser, you can build confidence before enforcing OCSP stapling with OCSP Must-Staple. Fixing revocation I don't need to talk about how broken revocation…
