Additional Benefits / Properties

• Clients could anonymously submit statistics about certificate mismatches

• Information about mismatches could be centrally evaluated to learn about regional attacks

• Reduced uptime requirements of OCSP servers (outages of a couple of hours are acceptable)

• Limited performance requirements for Vouching Servers, because only servers connect to them

• As with OCSP stapling: no OCSP privacy issue; works at captive portals / hotspots prior to login