Re: AW: [RFC] Enable OCSP Stapling by default in httpd trunk

2015-07-03 Thread Rob Stradling
On 03/07/15 11:13, Plüm, Rüdiger, Vodafone Group wrote: snip Thanks for the detailed explanation. So yes OCSP stapling is really beneficial if it is possible for the server admin to set it up. But it likely requires additional configuration steps outside of httpd to make the OCSP responder

Re: svn commit: r1688474 [1/21] - in /httpd/httpd/trunk/modules/http2: ./ m4/ mod-h2.xcodeproj/ mod-h2.xcodeproj/project.xcworkspace/ mod-h2.xcodeproj/project.xcworkspace/xcshareddata/ mod-h2.xcodepro

2015-07-03 Thread Jim Jagielski
On Jul 2, 2015, at 1:13 PM, William A Rowe Jr wr...@rowe-clan.net wrote: Just to clarify, On Tue, Jun 30, 2015 at 10:26 AM, j...@apache.org wrote: Author: jim Date: Tue Jun 30 15:26:16 2015 New Revision: 1688474 URL: http://svn.apache.org/r1688474 Log: Fold in git archive master of

Re: [RFC] Enable OCSP Stapling by default in httpd trunk

2015-07-03 Thread Rob Stradling
On 02/07/15 19:03, Ruediger Pluem wrote: snip Just to be sure I don't miss anything. This is not about disabling OCSP, its about disabling OCSP stapling by default. Maybe I have a wrong understanding of OCSP stapling, but to me stapling only provides performance improvements, not security

Re: svn commit: r1688474 [1/21] - in /httpd/httpd/trunk/modules/http2: ./ m4/ mod-h2.xcodeproj/ mod-h2.xcodeproj/project.xcworkspace/ mod-h2.xcodeproj/project.xcworkspace/xcshareddata/ mod-h2.xcodepro

2015-07-03 Thread Stefan Eissing
Am 02.07.2015 um 19:13 schrieb William A Rowe Jr wr...@rowe-clan.net: Just to clarify, On Tue, Jun 30, 2015 at 10:26 AM, j...@apache.org wrote: Author: jim Date: Tue Jun 30 15:26:16 2015 New Revision: 1688474 URL: http://svn.apache.org/r1688474 Log: Fold in git archive master of

AW: [RFC] Enable OCSP Stapling by default in httpd trunk

2015-07-03 Thread Plüm , Rüdiger , Vodafone Group
-Ursprüngliche Nachricht- Von: Rob Stradling [mailto:rob.stradl...@comodo.com] Gesendet: Freitag, 3. Juli 2015 12:01 An: dev@httpd.apache.org Betreff: Re: [RFC] Enable OCSP Stapling by default in httpd trunk On 02/07/15 19:03, Ruediger Pluem wrote: snip Just to be sure I don't