SSL stapling
SSL stapling, also called OCSP (Online Certificate Status Protocol) stapling, is a technique allowing clients to easily connect and resume sessions to an SSL/TLS server without having to contact the certificate authority, thus reducing SSL negotiation times. In normal OCSP transactions, the client contacts the certificate authority so as to check the revocation status of the server's certificate. In the case of high traffic websites, this can cause huge stress on CA servers. An intermediary solution was designed: stapling. The OCSP record is obtained from the CA by your server itself periodically, and stapled to exchanges with the client. The OCSP record is cached by your server for a period of up to 48 hours in order to limit ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access