OCSP stapling for TLS
Online Certificate Status Protocol (OCSP) stapling is a method of checking the revocation status of digital certificates. The OCSP stapling approach for determining an SSL certificate's validity is assessed as being both safe and quick. The determination speed is achieved by permitting web servers to provide the validity information on its organic certificates instead of the lengthier process of requesting validating information from the certificate's issuing vendor.
Note
Online Certificate Status Protocol (OCSP) stapling was previously referred to as the Transport Layer Security (TLS) certificate status request extension.
OCSP stapling primer
THE OCSP stapling process involves several components and validity checks. The following graphic illustrates the OCSP stapling process:
As you can see, the process starts when the user attempts to open an SSL-encrypted website via their browser. The browser queries the web server to ensure the SSL-encrypted website has a valid certificate...
