Welcome! Log In Create A New Profile

Re: OCSP stapling in Nginx >=1.3.7

Forum List Message List New Topic Print View

Maxim Dounin

September 18, 2018 01:30PM

Hello!

On Tue, Sep 18, 2018 at 09:18:52PM +0500, Илья Шипицин wrote:

> вт, 18 сент. 2018 г. в 19:01, Gena Makhomed <gmm@csdoc.com>:

[...]

> > То есть цель у флага OCSP Must-Staple наверное та же самая,
> > что и у OCSP Stapling - снизить нагрузку на инфраструктуру CA.
>
> цель у этого флага непонятна никому. есть ощущение, что (как и многие
> аспекты TLS/SSL) это просто не очень продуманный дизайн.

Цель не секрет же - сделать обязательную проверку отзыва
сертификата. Против явного флага "обязательно проверять отзыв"
активно возражали представители CA - справедливо полагая, что им
от таких сертификатов прилетит нагрузки на OCSP-сервера - в
результате получилось вот такое вот.

--
Maxim Dounin
http://mdounin.ru/
_______________________________________________
nginx-ru mailing list
nginx-ru@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-ru

Reply Quote

RSS

Subject	Author	Posted
OCSP stapling in Nginx >=1.3.7	Gena Makhomed	September 06, 2018 11:28AM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 10, 2018 09:06AM
Re: OCSP stapling in Nginx >=1.3.7	Gena Makhomed	September 10, 2018 03:40PM
Re: OCSP stapling in Nginx >=1.3.7	Илья Шипицин	September 10, 2018 04:24PM
Re: OCSP stapling in Nginx >=1.3.7	ngnx8810773a83	September 10, 2018 05:01PM
Re: OCSP stapling in Nginx >=1.3.7	Илья Шипицин	September 11, 2018 03:08AM
Re: OCSP stapling in Nginx >=1.3.7	ngnx8810773a83	September 10, 2018 04:52PM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 10, 2018 11:22PM
Re: OCSP stapling in Nginx >=1.3.7	Gena Makhomed	September 11, 2018 04:12AM
Re: OCSP stapling in Nginx >=1.3.7	Илья Шипицин	September 11, 2018 04:16AM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 11, 2018 08:40AM
Re: OCSP stapling in Nginx >=1.3.7	Gena Makhomed	September 11, 2018 10:42AM
Re: OCSP stapling in Nginx >=1.3.7	Илья Шипицин	September 11, 2018 11:06AM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 11, 2018 12:00PM
Re: OCSP stapling in Nginx >=1.3.7	Gena Makhomed	September 11, 2018 03:00PM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 12, 2018 10:38AM
Re: OCSP stapling in Nginx >=1.3.7	Gena Makhomed	September 15, 2018 07:36AM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 16, 2018 07:38PM
Re: OCSP stapling in Nginx >=1.3.7	Илья Шипицин	September 17, 2018 09:06AM
Re: OCSP stapling in Nginx >=1.3.7	Gena Makhomed	September 18, 2018 10:02AM
Re: OCSP stapling in Nginx >=1.3.7	Илья Шипицин	September 18, 2018 12:20PM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 18, 2018 01:30PM
Re: OCSP stapling in Nginx >=1.3.7	Илья Шипицин	September 18, 2018 01:50PM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 18, 2018 03:10PM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 18, 2018 01:04PM
Re: OCSP stapling in Nginx >=1.3.7	ngnx8810773a83	September 18, 2018 04:10PM
Re: OCSP stapling in Nginx >=1.3.7	Gena Makhomed	September 19, 2018 06:54PM
Re: OCSP stapling in Nginx >=1.3.7	ngnx8810773a83	September 19, 2018 07:46PM
Re: OCSP stapling in Nginx >=1.3.7	Gena Makhomed	September 18, 2018 05:28PM
Re: OCSP stapling in Nginx >=1.3.7	Илья Шипицин	September 18, 2018 06:00PM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 19, 2018 03:26PM
Re: OCSP stapling in Nginx >=1.3.7	Илья Шипицин	September 19, 2018 03:54PM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 19, 2018 02:58PM
Re: OCSP stapling in Nginx >=1.3.7	Gena Makhomed	September 19, 2018 06:32PM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 19, 2018 08:08PM
Re: OCSP stapling in Nginx >=1.3.7	Gena Makhomed	September 19, 2018 10:42PM
Re: OCSP stapling in Nginx >=1.3.7	Илья Шипицин	September 20, 2018 02:32AM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 20, 2018 09:02AM
Re: OCSP stapling in Nginx >=1.3.7	Илья Шипицин	September 20, 2018 09:52AM
Re: OCSP stapling in Nginx >=1.3.7	Gena Makhomed	September 20, 2018 01:56PM
Re: OCSP stapling in Nginx >=1.3.7	Maxim Dounin	September 20, 2018 07:48PM
Re: OCSP stapling in Nginx >=1.3.7	Gena Makhomed	September 21, 2018 12:42PM
How to Improve SEO with HTTPS and NGINX	Gena Makhomed	September 15, 2018 11:22AM
Re: How to Improve SEO with HTTPS and NGINX	Maxim Dounin	September 16, 2018 07:44PM

Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 276

Record Number of Users: 8 on April 13, 2023

Record Number of Guests: 500 on July 15, 2024