> OCSP can be locally cached, and Apple's implementation does exactly that.
In the earlier HN thread when the server was offline, it was said that Apple only cached OCSP results for 5 minutes. Is that not true? If it is true, I don't think that's what GP is asking for as far as local caching.
It was changed after the event and is now 12 hours. Which is probably more appropriate considering that most people don't restart their applications every few minutes.
In the earlier HN thread when the server was offline, it was said that Apple only cached OCSP results for 5 minutes. Is that not true? If it is true, I don't think that's what GP is asking for as far as local caching.