While working on an engagement deploying a medium farm on Windows 2008 with no internet connection I noticed a considerable performance hit causing by check for publisher's certificate revocation which is on by default. Basically by having this option
