Current time: 06-24-2018, 05:59 AM Hello There, Guest! (LoginRegister)

Post Reply 
 
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
What is Firefox request to ocsp.int-x3.letsencrypt.org and similar
01-17-2018, 01:21 AM (This post was last modified: 01-17-2018 04:17 AM by jasom.)
Post: #1
What is Firefox request to ocsp.int-x3.letsencrypt.org and similar
When I test speed in Firefox, there are some strange requests tied with SSL certificate at the beginning of the waterfall:


But it isn't always present in waterfall. For example site troyhunt.com (Comodo is cert issuer) has no such request: https://www.webpagetest.org/result/18011...view_step1

May somebody explain me what it is? Can I somehow reduce these requests? Why chrome doesn't do such requests?
Find all posts by this user
Quote this message in a reply
01-17-2018, 07:06 AM
Post: #2
RE: What is Firefox request to ocsp.int-x3.letsencrypt.org and similar
It's the check as to whether a certificate has been revoked or not - Online Certificate Status Protocol or OCSP for short

Different browsers have different rules as to if and when they check them.

A technique called OCSP Stapling will remove them, which needs to be configured for the root domain on your server, third-parties need to be configured on their own servers / CDNs

Andy

Using WebPageTest - http://usingwpt.com/
Visit this user's website Find all posts by this user
Quote this message in a reply
01-17-2018, 08:13 PM
Post: #3
RE: What is Firefox request to ocsp.int-x3.letsencrypt.org and similar
That it was, so I have enabled OCSP Stapling on all my servers, thank you.
Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 1 Guest(s)