News for hackers. Stuff that matters.
Re:OCSP Service Has Reached End of Life by GauntletWizard on Sunday September 14, 2025 @08:10PM (#45244656)
[delayed]
Re:OCSP Service Has Reached End of Life by layer8 on Monday September 15, 2025 @10:03AM (#45249900)
The use case is to shorten the lifetime of an existing certificate. As long as the server serves the original certificate with the longer lifetime, the browser has no way to tell that it isn’t supposed to be that long anymore, without asking the CA.

Yes, you could restrict certificates to very short lifetimes like 24 hours or less, but that isn’t always practical for non-TLS use cases.