Do all other major CAs offer OCSP? Are all major browsers performing the check? I vaguely remember Firefox doesn't. Not at my desk now to check it...
Edit: I believe OCSP is tried, but silently ignored if there is no reponse quickly enough.
Do all other major CAs offer OCSP? Are all major browsers performing the check? I vaguely remember Firefox doesn't. Not at my desk now to check it...
Edit: I believe OCSP is tried, but silently ignored if there is no reponse quickly enough.
Firefox has a a toggle `Query OCSP responder servers to confirm the current validity of certificates`, which is turned off by default.
Edit: It seems to be enabled by default! I've been using Firefox for as long as I remember, and don't setup Firefox afresh frequently.
[dead]