Hello List

I am planning to land a patch to reduce the default (soft-fail) OCSP network timeout values. Currently OCSP connections timeout after 10 seconds and my plan is to changed that to 3 seconds (hard fail will keep the current 10 second timeout value).

With this change (according to telemetry) we will cover 95% of successful checks in desktop and 90% of fennec. (2 seconds is 90% of desktop 85% of fennec). Currently fennect cancelled connections are about 6% of connections.

Any issues with this change?

Thanks

Camilo
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to