ocsp - The Cloudflare Blog

High-reliability OCSP stapling and why it matters

Published on July 10th, 2017 12:43PM by Nick Sullivan.

At Cloudflare our focus is making the internet faster and more secure. Today we are announcing a new enhancement to our HTTPS service: High-Reliability OCSP stapling. This feature is a step towards enabling an important security feature on the web: certificate revocation checking. Reliable OCSP stapling also improves connection times

The Hidden Costs of Heartbleed

Published on April 17th, 2014 10:00AM by Matthew Prince.

A quick followup to our last blog post on our decision to reissue and revoke all of CloudFlare's customers' SSL certificates. One question we've received is why we didn't just reissue and revoke all SSL certificates as soon as we got word about

What We Just Did to Make SSL Even Faster

Published on December 11th, 2012 5:24PM by Matthew Prince.

A little over a month ago, we published a couple of blog posts about how we were making SSL faster. Specifically, we enabled OCSP stapling across our network.

CloudFlare Works with GlobalSign to Make SSL Faster Across the Web

Published on November 1st, 2012 4:34PM by Matthew Prince.

Earlier this week we announced how CloudFlare enabled OCSP stapling in order to improve our customers' SSL performance. OCSP stapling is awesome and improves SSL performance by as much as 30%. However, it is limited to browsers that support OCSP stapling and only benefits CloudFlare's customers.

OCSP Stapling: How CloudFlare Just Made SSL 30% Faster

Published on October 29th, 2012 5:54PM by Matthew Prince.

This week CloudFlare is announcing several things we're doing to significantly improve the performance of SSL. Too few sites are secured with SSL. One of the reasons sites don't implement SSL is that it can slow down web performance.