Tagged articles

OCSP

3 articles · Page 1 of 1

Sep 1, 2026 · Operations

Diagnosing Slow HTTPS Handshakes: Certificates, Network, or Cipher Suites?

This comprehensive guide provides a systematic troubleshooting framework for slow HTTPS handshakes, covering TCP/TLS timing separation, certificate chain validation, OCSP stapling, cipher suite selection, session reuse, and packet capture analysis with practical commands for Nginx and Apache.

HTTPSNginxOCSP

0 likes · 47 min read

Diagnosing Slow HTTPS Handshakes: Certificates, Network, or Cipher Suites?

MaGe Linux Operations

Jan 27, 2021 · Operations

How to Cut Nginx HTTPS Latency by 30%: Practical TLS Tuning Guide

This article explains why Nginx HTTPS latency matters for instant search, describes how TLS handshake round‑trips affect response time, and provides step‑by‑step Nginx TLS configuration tweaks—including HTTP/2, cipher ordering, OCSP stapling, buffer sizing, and session caching—that together reduced real‑world latency by about 30%.

HTTPSNginxOCSP

0 likes · 13 min read

How to Cut Nginx HTTPS Latency by 30%: Practical TLS Tuning Guide

Efficient Ops

Dec 11, 2019 · Information Security

Why HTTPS Certificate Revocation Still Fails: CRL, OCSP, and Modern Browser Challenges

This article explores how HTTPS certificates are validated, why revocation mechanisms like CRL and OCSP often fall short, compares browser implementations, and discusses practical mitigation techniques such as OCSP stapling and Must‑Staple to improve TLS security.

CRLCertificate RevocationHTTPS

0 likes · 19 min read

Why HTTPS Certificate Revocation Still Fails: CRL, OCSP, and Modern Browser Challenges