HPE7-A01 · Question #52
What is one advantage of using OCSP vs CRLs for certificate validation?
The correct answer is A. reduces latency between the time a certificate is revoked and validation reflects this status. OCSP is a protocol that allows clients to query the CA or a trusted responder for the status of a specific certificate. OCSP requests and responses are smaller and faster than CRLs, and they can provide real-time information about the revocation status of a certificate. CRLs…
Question
What is one advantage of using OCSP vs CRLs for certificate validation?
Options
- Areduces latency between the time a certificate is revoked and validation reflects this status
- Bless complex to implement
- Chigher availability for certificate validation
- Dsupports longer certificate validity periods
How the community answered
(26 responses)- A88% (23)
- B8% (2)
- C4% (1)
Explanation
OCSP is a protocol that allows clients to query the CA or a trusted responder for the status of a specific certificate. OCSP requests and responses are smaller and faster than CRLs, and they can provide real-time information about the revocation status of a certificate. CRLs are lists of all revoked certificates that are downloaded from the CA. CRLs can present issues, as they can become outdated and have to be downloaded frequently. Therefore, OCSP reduces latency between the time a certificate is revoked and validation reflects this status.
Topics
Community Discussion
No community discussion yet for this question.