← Back to glossary
📡

OCSP

Encryption

TLS (Transport Layer Security) Certificate Authority (CA) Public Key Infrastructure (PKI) Certificate Revocation

Online Certificate Status Protocol; privacy mitigations include OCSP stapling and short-lived certificates.

Definition

OCSP queries a CA responder about revocation status. OCSP stapling lets the server provide a signed response, reducing client privacy leakage and latency.

In plain English Online Certificate Status Protocol; privacy mitigations include OCSP stapling and short-lived certificates.

Why this matters

Why it matters: Poor revocation checking can leak browsing behavior; stapling reduces that risk.

Example

Example: Prefer OCSP stapling; minimize client-side status requests and use short-lived certificates.