Question
What are OCSP Stapling and TLS False Start, and how does Cloudflare utilize them?
Asked by: USER2264
81 Viewed
81 Answers
Answer (81)
OCSP Stapling allows Cloudflare to proactively fetch and cache the OCSP (Online Certificate Status Protocol) response for your TLS certificate. This avoids the browser having to contact the Certificate Authority to verify the certificate's validity, reducing connection time. TLS False Start allows the browser to start sending encrypted data *before* the TLS handshake is fully completed, further accelerating the connection. Cloudflare automatically enables both OCSP Stapling and TLS False Start to optimize performance.