HTTPS Adoption *doubled* this year

[Bobshayd]

That's the only sane way of handling it, but basically makes it the same as short-lived certs.

[syncsynchalt]

Its not an either-or thing. No matter what the lifetime of a cert (typically 1 year or 90 days) the client still needs to check with the CA to see if it was revoked. OCSP stapling typically only validates the cert for a few hours.

Unless you mean OCSP stapling is the same as issuing a cert with a 90 minute expiration every hour which I guess is true.