Confirmed users
502
edits
Security/Server Side TLS: Difference between revisions
Jump to navigation
Jump to search
→OCSP Stapling
Gdestuynder (talk | contribs) |
Gdestuynder (talk | contribs) |
||
| Line 183: | Line 183: | ||
The solution is to allow the server to send the OCSP record during the TLS handshake, therefore bypassing the OCSP responder. This mechanism saves a roundtrip between the client and the OCSP responder, and is called OCSP Stapling. | The solution is to allow the server to send the OCSP record during the TLS handshake, therefore bypassing the OCSP responder. This mechanism saves a roundtrip between the client and the OCSP responder, and is called OCSP Stapling. | ||
The location of the OCSP responder is taken from the Authority Information Access field of the signed certificate: | The location of the OCSP responder is taken from the Authority Information Access field of the signed certificate. For example, with StartSSL: | ||
<pre> | <pre> | ||
Authority Information Access: | Authority Information Access: | ||