david-maw / StreamSSL

The StreamSSL sample described in CodeProject
Other
47 stars 24 forks source link

Implement OCSP stapling #81

Open david-maw opened 5 years ago

david-maw commented 5 years ago

OCSP stapling is a technique designed to avoid the overhead and security implications of using OCSP to validate certificates (which itself seeks to mitigate the cost of using a CRL). I believe Windows has support for OCSP stapling (IIS and IE allegedly can use it), so with any luck it should be possible to take advantage of that support.