Devin Mullins

This seems feasible now. We no longer use `dep`. Renovate [supports go.mod](https://docs.renovatebot.com/golang/). ampproject/amphtml uses renovate. We should talk to infra.

Filed golang/go#45244 for the upstream `ocsp` lib, but we should fix on our end in the meantime.

This will be much more important as of WICG/webpackage#383.

Restarting the server every 90 days is an option. Perhaps not a particularly pleasant one, but perhaps not so bad in this world of coordinated containers.

Cert renewals will have a different cert-sha256 and hence a different cert-url and generate different signatures. If so, we should decide whether to continue serving the old cert at the...

Update: - We should support hosting old and new cert at same time. (Does this mean we'll need to change the toml to allow a list of cert paths?) -...

Sorry for the noise; changing things back since I see from the comments there is other stuff than just the tests. Split the tests off into #433 since that seems...

cc @ampproject/wg-caching

This PR LGTM, but I suggest some additional actions per the comments here. To start, maybe update the above to what the Google AMP Cache outputs now for AMP documents:...

Also, maybe we should recommend that publishers replace `report-uri` with one that they can monitor.