Comment by nullc

Hm? The overhead reduction is on the server. Verification IIRC is somewhat slower.

There are CAs that issue them, uh... someone managed to get one issued during the TLS WG meeting at IETF last week. I'd have to listen to the audio to find out what CA they used.