Not sure about the OCSP encryption but they did remove their VPN bypass in 11.2 (which was the bigger issue for me at least)