[dfc]

If you are leaking usage information with ocsp/crl checks you are also spewing out information via DNS requests.