search

igrigorik / istlsfastyet.com

Is TLS fast yet? Yes, yes it is.
https://istlsfastyet.com
421 stars 89 forks source link

Akamai is not currently supporting OCSP stapling #108

Closed michaelhood closed 8 years ago

michaelhood commented 8 years ago

Learned today from CCare @ Akamai. Advised it will be "enabled again in the future", but they have no ETA to share. :disappointed:

michaelhood commented 8 years ago

Relevant to #58

igrigorik commented 8 years ago

/cc @sludin for a sanity check :)

michaelhood commented 8 years ago

thanks @igrigorik. I'd love to be wrong here.

sludin commented 8 years ago

I am looking into this today to get an understanding of the confusion.

-stephen

From: Ilya Grigorik notifications@github.com Reply-To: "igrigorik/istlsfastyet.com" reply@reply.github.com Date: Thursday, March 31, 2016 at 10:22 PM To: "igrigorik/istlsfastyet.com" istlsfastyet.com@noreply.github.com Cc: Stephen Ludin sludin@ludin.org Subject: Re: [igrigorik/istlsfastyet.com] Akamai is not currently supporting OCSP stapling (#108)

/cc @sludin for a sanity check :)

— You are receiving this because you were mentioned. Reply to this email directly or view it on GitHub

michaelhood commented 8 years ago

thanks @sludin. I can provide more details off thread if it helps.

michaelhood commented 8 years ago

@sludin I got the following resolution summary from CCare today:

PROBLEM SUMMARY: Question about OCSP stapling

RESOLUTION: Akamai currently not supporting OCSP stapling. The support for OCSP stapling will be enabled again in the future.

@igrigorik I'm comfortable suggesting this should be merged, but understand if you'd like to wait for news from @sludin.

igrigorik commented 8 years ago

Yikes, that looks unfortunate. Do we know the reason for why OCSP stapling was removed?

I'd love to get a confirmation from @sludin.. but that's not a strict requirement.

sludin commented 8 years ago

I have been doing some present day archaeology to understand what happened. It turns out it is the difference between the functionality being available on the network and in the official product catalog. Due to some late bugs it was dropped from a release a while back, something that I was unaware of this. That put the feature in a place where it is there and available, but no one can use it. The latter part is the one that matters. I am all for pulling it for now and once it is part of a product and easily available ( very soon I am told ) I’ll create a pull request to update it.

Thanks for being patient while I figured this out.

-stephen

From: Ilya Grigorik notifications@github.com Reply-To: "igrigorik/istlsfastyet.com" reply@reply.github.com Date: Wednesday, April 6, 2016 at 10:20 PM To: "igrigorik/istlsfastyet.com" istlsfastyet.com@noreply.github.com Cc: Stephen Ludin sludin@ludin.org Subject: Re: [igrigorik/istlsfastyet.com] Akamai is not currently supporting OCSP stapling (#108)

Yikes, that looks unfortunate. Do we know the reason for why OCSP stapling was removed?

I'd love to get a confirmation from @sludin.. but that's not a strict requirement.

— You are receiving this because you were mentioned. Reply to this email directly or view it on GitHub

igrigorik commented 8 years ago

@sludin thanks, appreciate your help! Glad to hear that it should be back online soon.

Merging, and hoping we can revert soon :)

kylerandolph commented 8 years ago

@sludin any update on this?

javiergarza commented 8 years ago

OCSP stapling is already available for a few customers. I believe Rajiv Manglani @rajiv will post in the Akamai community soon when it will be generally available as self-service for all Akamai customers