WebPagetest Forums
What is Firefox request to ocsp.int-x3.letsencrypt.org and similar - Printable Version

+- WebPagetest Forums (https://www.webpagetest.org/forums)
+-- Forum: Web Performance (/forumdisplay.php?fid=3)
+--- Forum: Optimization Discussions (/forumdisplay.php?fid=5)
+--- Thread: What is Firefox request to ocsp.int-x3.letsencrypt.org and similar (/showthread.php?tid=15191)



What is Firefox request to ocsp.int-x3.letsencrypt.org and similar - jasom - 01-17-2018 01:21 AM

When I test speed in Firefox, there are some strange requests tied with SSL certificate at the beginning of the waterfall:


But it isn't always present in waterfall. For example site troyhunt.com (Comodo is cert issuer) has no such request: https://www.webpagetest.org/result/180116_KW_74a216e45acd585bbae822967ec43e5e/1/details/#waterfall_view_step1

May somebody explain me what it is? Can I somehow reduce these requests? Why chrome doesn't do such requests?


RE: What is Firefox request to ocsp.int-x3.letsencrypt.org and similar - andydavies - 01-17-2018 07:06 AM

It's the check as to whether a certificate has been revoked or not - Online Certificate Status Protocol or OCSP for short

Different browsers have different rules as to if and when they check them.

A technique called OCSP Stapling will remove them, which needs to be configured for the root domain on your server, third-parties need to be configured on their own servers / CDNs


RE: What is Firefox request to ocsp.int-x3.letsencrypt.org and similar - jasom - 01-17-2018 08:13 PM

That it was, so I have enabled OCSP Stapling on all my servers, thank you.