From the course: CompTIA Security+ (SY0-701) Cert Prep: 1 General Security Concepts

Unlock the full course today

Join today to access over 23,200 courses taught by industry experts.

Certificate stapling

Certificate stapling

From the course: CompTIA Security+ (SY0-701) Cert Prep: 1 General Security Concepts

Start my 1-month free trial Buy for my team

Certificate stapling

“

The primary issue with OCSP is that it places a significant burden on the OCSP servers operated by certificate authorities. These servers must process requests from every single visitor to a website or other user of a digital certificate, verifying that the certificate is valid and hasn't been revoked. Certificate stapling is an extension to the Online Certificate Status Protocol that relieves some of the burden placed upon certificate authorities by the original protocol. Let's look at how certificate stapling works for a web server. When a user visits a website and initiates a secure connection, the website sends its certificate to the user's browser, which is then normally responsible for contacting an OCSP server to verify the certificate's validity. With certificate stapling, the web server contacts the OCSP server itself and receives a signed and time-stamped response from the OCSP server, which the web server then attaches or staples to the digital certificate. Then, when a…

Contents