thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

OCSP Stapling

TLS feature where the server fetches and attaches a signed OCSP response to its handshake.

Definition

With stapling (the TLS Certificate Status Request extension), the server periodically obtains a time-stamped OCSP response from the CA and provides it to clients. This improves performance and privacy because clients do not contact the CA directly. The response is signed by the CA, so the server cannot forge it.

Example

Enabling ssl_stapling on in NGINX makes the server include OCSP responses in handshakes.

Exam tip

Stapling solves OCSP's privacy and latency issues; the server, not the client, contacts the responder.

Related terms