Subject: Re: [Uta] OCSP in RFC7525bis

From: "Salz, Rich" <[email-masked]>
Date: Wed, 19 Jan 2022 17:23:14 +0000

*   We would be grateful for feedback based on implementation experience. In particular if you have quantitative data on the use or quality of OCSP that’s more recent than Chung18 [3], that would be very useful.

For what it’s worth, *our* customers want OCSP stapling. (It’s enabled by default and nobody has turned it off.) Note that if we can’t get an OCSP response within a time period, we proceed with the handshake anyway. We are the CDN for many responders. We don’t have metrics on when a response is not available, nor do we know when such transactions proceeed or close the connection, sorry. I guess the takeaway is that server owners seem to like this, regardless of what clients do.

Hope this helps.
                /r$