cid 501280fb2b23379686e3d0bd949d7cceb16e3ba1c947410877fe17dc29e35eb9 · original · open access · via wikipedia
Title: OCSP stapling
Authors:
Venue: Wikipedia
Year: unknown
Canonical: wiki:ocsp-stapling
URL: https://en.wikipedia.org/wiki/OCSP_stapling
Collector: wikipedia
OA: true
ABSTRACT
Online Certificate Status Protocol stapling, formally known as the TLS Certificate Status Request extension, is a standard for checking the revocation status of X.509 digital certificates. It allows the presenter of a certificate to bear the resource cost involved in providing Online Certificate Status Protocol (OCSP) responses. With OCSP stapling, the presenter appends ("staples") a time-stamped OCSP response signed by the certificate authority (CA) to the initial TLS handshake, eliminating the need for clients to contact the CA. OCSP stapling aims to improve both security and performance.