NETWORK SECURITY
DIGITAL SIGNATURE
Question
[CLICK ON ANY CHOICE TO KNOW THE RIGHT ANSWER]
|
____ performs a real-time lookup of a digital certificate’s status.
|
Online Certificate Status Protocol (OCSP)
|
|
Certificate Revocation List (CRL)
|
|
CA Registry Database (CARD)
|
|
Real-Time CA Verification (RTCAV)
|
Explanation:
Detailed explanation-1: -OCSP and CRLs are both used to verify the revocation status of TLS certificates, but the way they work is very different. While a CRL lists all the revoked certificates, OCSP gives the revocation status of the single website requested by the browser.
Detailed explanation-2: -Since an OCSP response contains less data than a typical certificate revocation list (CRL), it puts less burden on network and client resources. Since an OCSP response has less data to parse, the client-side libraries that handle it can be less complex than those that handle CRLs.
There is 1 question to complete.