Could have just kept using OSCP stapling | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		shim__ 4 months ago \| parent \| context \| favorite \| on: Upcoming Changes to Let's Encrypt Certificates Could have just kept using OSCP stapling

ekr____ 4 months ago | [–]

Basically OCSP stapling (more specifically must-staple) is isomorphic to short-lived certificates.

alwillis 4 months ago | [–]

OSCP enables every website someone visits to be tracked; see https://news.ycombinator.com/item?id=46290033

SkiFire13 4 months ago | [–]

OSCP stapling (which OP mentions) is supposed to fix that though.

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact