SSL: Difference between revisions

No change in size ,  2 years ago
 
Line 271:
 
;OCSP Issues:
*OSPFOCSP itself can introduce a significant cost for the CA because it requires them to provide responses to every client of a given certificate in real time.
*When a certificate is issued to a high traffic website, the servers of CAs are likely to be hit by enormous volumes of OCSP requests querying the validity of the certificate
*OCSP checking potentially impairs users' privacy and slows down browsing, since it requires the client to contact a third party (the CA) to confirm the validity of each certificate that it encounters.