Lesson plan
OCSP stapling
Online Certificate Status Protocol stapling (OCSP stapling), formally known as the TLS Certificate Status Request extension, is a standard for checking the revocation status of X.509 digital certificates. It allows the presenter of a certificate to bear the resource cost involved in providing Online Certificate Status Protocol (OCSP) responses. With OCSP stapling, the presenter appends ("staples") a time-stamped OCSP response signed by the certificate authority (CA) to the initial TLS handshake, eliminating the need for clients to contact the CA. OCSP stapling aims to improve both security and performance.
Article summary
Online Certificate Status Protocol stapling (OCSP stapling), formally known as the TLS Certificate Status Request extension, is a standard for checking the revocation status of X.509 digital certificates. It allows the presenter of a certificate to bear the resource cost involved in providing Online Certificate Status Protocol (OCSP) responses. With OCSP stapling, the presenter appends ("staples") a time-stamped OCSP response signed by the certificate authority (CA) to the initial TLS handshake, eliminating the need for clients to contact the CA. OCSP stapling aims to improve both security and performance.
Key claims
No claims recorded.
Discussion questions
- Summarise the article in your own words. Which single claim would you verify first, and why?
- Which claim in this article is most likely to be revised as the sources update? How would you check its current status?
- If two sources disagreed about one of these facts, what would you need in order to trust one over the other?
Bibliography
No sources recorded.
Key claims and bibliography are generated from the same tracked claims and sources as the article page.