December 2017
Intermediate to advanced
410 pages
11h 5m
English
When a browser sends an OCSP request to the CA servers, the CA will know which client is accessing which domain. This may breach the privacy part. This is illustrated in the following diagram:

In the backend, the OCSP Responder can also store the IP of the client and the Domain it is accessing. This can give great detail as to who is accessing which website as well as many other details.
Read now
Unlock full access