“So soft-fail revocation checks are like a seat-belt that snaps when you crash,” he said. “Even though it works 99% of the time, it’s worthless because it only works when you don’t need it.”
This suggests that online certificate revocation checking doesn’t add a lot of value to Web security in its current implementation. However, keeping it on comes at a significant cost — browsing speed.