[nullc]

Beyond being seldom used, they also leak usage information.

[dfc]

If you are leaking usage information with ocsp/crl checks you are also spewing out information via DNS requests.