3 ms·
Check server certificate OCSP first, send subsequent queries via SSL.
by pedro2 6y ago
Check server certificate OCSP first, send subsequent queries via SSL.
- lstamour 6y agoPrecisely. This would require more work, but it would only leak the OCSP server’s revocation request, and would make OCSP both more secure (caching OCSP server validity rather than the original certificates) and more private (due to SSL).