https://bz.apache.org/bugzilla/show_bug.cgi?id=50740
Jeff Trawick <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |WONTFIX Status|NEW |RESOLVED --- Comment #20 from Jeff Trawick <[email protected]> --- Enabling OCSP Stapling by default in a generally available release was vetoed with the following justification: "The fundamental objection I have to enabling stapling by default in our GA releases is that it would enable a "phoning home" feature (to the CA's OCSP responders) as a side effect of configuring a certificate. This is a setting I consider unacceptable for software published by the Apache HTTP Server project - the default must be opt-in, not opt-out." (From message http://mail-archives.apache.org/mod_mbox/httpd-dev/201411.mbox/%3C5454A244.6070006%40velox.ch%3E) This concern is not going to be resolved in a Bugzilla issue, so I'm closing it as WONTFIX. The [email protected] mailing list is the proper venue if further clarification or other discussion is desired. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
