So last week we moved our revocation repositories behind a CDN, this has a number of great benefits but it does have downsides though, for example. Cache misses result in a slower response – About a 110ms in my tests. OCSP clients that create POSTs get a slower response – This is because they are … Continue reading Serving OCSP on a CDN