OCSP Stapling

GPTKB entity

Statements (32)
Predicate Object
gptkbp:instanceOf Internet security protocol feature
gptkbp:alsoKnownAs TLS Certificate Status Request extension
gptkbp:alternativeTo gptkb:CRL_(Certificate_Revocation_List)
gptkbp:benefit Prevents client from directly contacting CA for revocation status
gptkbp:definedIn gptkb:RFC_6066
gptkbp:extendsTo TLS
gptkbp:extensionName status_request
https://www.w3.org/2000/01/rdf-schema#label OCSP Stapling
gptkbp:improves Performance of certificate validation
User privacy
gptkbp:introducedIn 2006
gptkbp:mechanismOfAction Server obtains OCSP response from CA and delivers it to client
gptkbp:purpose Improve privacy of certificate status requests
Reduce OCSP traffic to certificate authorities
Reduce latency in certificate validation
gptkbp:relatedTo gptkb:certification
gptkb:Online_Certificate_Status_Protocol
X.509 certificates
gptkbp:requires Client support
Server support
gptkbp:supportedBy gptkb:Google_Chrome
gptkb:Mozilla_Firefox
gptkb:Microsoft_IIS
gptkb:Nginx
gptkb:OpenSSL
gptkb:Microsoft_Edge
gptkb:Safari
gptkb:Apache_HTTP_Server
gptkbp:usedIn gptkb:SSL
TLS
gptkbp:bfsParent gptkb:Web_PKI
gptkbp:bfsLayer 6