Everything about OCSP stapling
Standard to check the revocation status of X.509
Online Certificate Status Protocol stapling, formally known as the TLS Certificate Status Request extension, is a standard for checking the revocation status of X.509 digital certificates. It allows the presenter of a certificate to bear the resource cost involved in providing Online Certificate Status Protocol (OCSP) responses. With OCSP stapling, the presenter appends ("staples") a time-stamped OCSP response signed by the certificate authority (CA) to the initial TLS handshake, eliminating the need for clients to contact the CA. OCSP stapling aims to improve both security and performance. Wikipedia →
🧠Start here: a 6-step reading path
- Read the overview: OCSP staplingA 5-minute orientation
- Go sideways: Online Certificate Status ProtocolA closely related topic
- Go sideways: Certificate revocationA closely related topic
đź“– Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
- No matching papers found.
đź“š Books worth reading
Open Library didn't respond; try again in a moment.
đź”— Related topics
- Online Certificate Status Protocol The Online Certificate Status Protocol (OCSP) is an Internet protocol used for obtaining the revocation status of an X.509 digital certificate. It was…
- Certificate revocation In public key cryptography, a certificate may be revoked before it expires, which signals that it is no longer valid. Without revocation, an attacker could…
- Server Name Indication Server Name Indication (SNI) is an extension to Transport Layer Security (TLS) where a client indicates which hostname it is attempting to connect to at…
- Automatic Certificate Management Environment The Automatic Certificate Management Environment (ACME) protocol is a communication protocol for automating interactions between certificate authorities…
- Transport Layer Security Transport Layer Security (TLS) is a cryptographic protocol designed to provide secured communications over a computer network, such as the Internet. The…
- Public key certificate In cryptography, a public-key certificate, also known as a digital certificate or identity certificate, is an electronic document used to prove the valid…
- Network Security Services Network Security Services (NSS) is a collection of cryptographic computer libraries designed to support cross-platform development of security-enabled…
- X.509 In cryptography, X.509 is an International Telecommunication Union (ITU) standard defining the format of public key certificates. X.509 certificates are…