Recognition Display OCSP Stapling Validation for Faster HTTPS Checks
Every time a visitor opens the web-accessible version of a school’s digital hall of fame, or every time a lobby kiosk re-establishes its HTTPS connection after a power cycle, the browser or content agent must confirm that the server’s TLS certificate has not been revoked. Without OCSP stapling, that check requires a separate HTTP request to the certificate authority’s Online Certificate Status Protocol responder—a round trip that can add 100 to 300 milliseconds to every connection, depending on the CA’s infrastructure location and the school network’s latency to it. At 7 a.m. before a tournament, when a dozen recognition kiosks are booting simultaneously and a gymnasium scoreboard display is establishing its connection alongside them, that added latency multiplies across every device.
Read More
