-
Type: Improvement
-
Resolution: Fixed
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: None
-
Labels:None
-
Fully Compatible
-
Security 2021-08-23
-
16
On Windows, OCSP information for certificates is retrieved as part of GetCertificateChain. If the OCSP information is not cached, Windows will synchronously make requests for OCSP and/or CRL information. If these OCSP and/or CRL servers are slow to respond, this gives the user a poor user experience and may cause overall connection timeouts.
We should warn users if connections take more than a certain threshold, say 5 seconds.