Free Post certificate revocation Déjà vu - macOS hits OCSP hurdles Regular readers will have seen me talk about OCSP many times before and some of those times are going back quite a number of years. That's why it...
Free Post certificate revocation Demonstrating that revocation checking is pointless! I've talked a lot about revocation checking before on my blog and made various arguments against it and explained why it's not such a great idea,...
Free Post ocsp OCSP Expect-Staple OCSP Expect-Staple is a new reporting mechanism to allow site owners to monitor how reliable their OCSP Stapling implementation is. With live feedback coming direct from the browser, you can...
Free Post OCSP Stapling OCSP Must-Staple Revocation checking is broken and has been for some time. Whilst some vendors have sort of worked around this with proprietary solutions, there is little that the smaller sites can...
Free Post cipher suite Getting an A+ rating on the Qualys SSL Test The SSL Test provided by Qualys does an incredibly thorough evaluation of the SSL configuration on your server. It's a great way to get a feel for whether...
Free Post certificate revocation Enabling Certificate Revocation Checks in Google Chrome Following on from the announcement of Heartbleed, it's fair to assume that there will be a huge amount of certificate revocations both in progress and in the days and weeks to come. With an increased number of revocations, there's the...
Free Post certificate OCSP Stapling; SSL with added speed and privacy Using SSL on your site comes with certain overheads and one of those overheads is checking the revocation status of your SSL certificate. Whilst this particular overhead resides on the client side, rather than the server side, it still affects the performance of your...
Follow