Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

OCSP stapling decreases the load on a PKI infrastructure's OCSP server by attaching a signed OCSP response to the target in a TLS connection. In addition it creates a more secure/private session since the CA doesn't know that your browser is accessing a given site. Some people have compared this behavior to Kerberos.

Question

  • What web browsers support OCSP stapling?

  • Are there any implementation considerations among different browsers that need to be addressed to maintain uniform privacy and performance benefits?

share|improve this question
1  
As a note - in a regular SSL session, the CA does not know the browser is accessing the site. There is nothing in the SSL protocol that involves the browser talking to the CA in anyway. Nor is OCSP required. I would not, in fact, call it "more secure" as some systems see having a fresh made-for-you OCSP response as the better security implementation. –  bethlakshmi May 1 '12 at 19:24
add comment

4 Answers

up vote 4 down vote accepted

My impression is that OCSP stapling is not well supported on the client side, but it's possible my information might be out of date.

Firefox apparently supports OCSP stapling, as of Firefox 26. (Thanks to Jan Schejbal for this information.)

The Chrome team has announced that they plan to remove OCSP checks entirely.

I've read one report that most browsers support OCSP stapling on Windows.

Here is some more information on browser support for OCSP (but not OCSP stapling, unfortunately).

share|improve this answer
    
Firefox 26 now includes OCSP stapling support as per an announcement on mozilla.dev.security.policy. –  Jan Schejbal Dec 13 '13 at 4:56
    
Thanks, @JanSchejbal! I've updated the answer accordingly. I appreciate it. –  D.W. Dec 13 '13 at 5:01
add comment

You can test OCSP stapling support in Your browser on http://www.vpnhosting.cz/ocsp.

It is in Czech language, if You can see OCSP_stapling_disabled, OCSP stapling is disabled, OCSP_stapling_enabled means, that OCSP stapling works.

share|improve this answer
    
looks like Opera 12.01 on Linux does support it, nice –  Hubert Kario Sep 25 '12 at 11:34
add comment

IE has supported it since Vista, Chrome supports it on Windows via CryptoAPI and on other platforms via patches to NSS it made that Firefox has not accepted, Opera has also supported it for several years. Firefox has the worst revocation behavior of any browser on a number of fronts its lack of support of OCSP stapling being the smallest example. Also Chrome will continue to support OCSP and OCSP stapling in enterprise scenarios they have provided their own revocation checking mechanism for a variety of reasons.

share|improve this answer
1  
Any sources for that? –  Hubert Kario May 20 '12 at 11:40
    
Look at the table for browser support in this page news.netcraft.com/archives/2013/07/19/… –  franzlorenzon Nov 21 '13 at 10:14
    
By the way, it's supported in the Firefox Development branch (blog.mozilla.org/security/2013/07/29/ocsp-stapling-in-firefox) –  franzlorenzon Nov 21 '13 at 10:20
add comment

Even with OCSP stapling, the act of verifying the OCSP signature may expose personal information to the OCSP signing root. Additionally the OCSP singing root can be a 3rd party to the entire infrastructure as shown here:

PKI hierarchy with two roots

source

Although there are security benefits to validating the signing OCSP signature, if privacy concerns outweigh security the following extension disables the signing functionality szOID_PKIX_OCSP_NOCHECK (1.3.6.1.5.5.7.48.1.5) (note it is up to the CA to implement this extension)

If you want to use CRL instead of OCSP, you can set the following setting to 1 or zero on a Windows machine

 HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ChainEngine\Config\CryptnetCachedOcspSwitchToCrlCount
share|improve this answer
    
Isn't this the case only when you want to check the validity of intermediate CA certificates in OCSP responder certificate and the OCSP stapled response doesn't have them already? In other words, it is a security hole but lot smaller than not checking revocation at all? –  Hubert Kario Jul 12 '12 at 11:30
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.