Hacker News Reader

They could switch to a CRL.

OCSP exists because CRLs don’t scale as you build an ever growing list of revoked certificates

With certificate age limits, the list is not ever-growing.