OCSP Expect-Staple is a report that will notify you if you aren't OCSP Stapling properly. OCSP Stapling is a performance and privacy feature that site operators can configure to prevent visitors from making online OCSP revocation requests.
OCSP Expect-Staple is seen by many as a pre-cursor to OCSP Must-Staple, an attempt at fixing the broken revocation system. A site must deploy OCSP Expect-Staple before considering OCSP Must-Staple to ensure they are ready.
Related Products
Network Error Logging
HPKP Reports
OCSP Expect-Staple can be used to test your existing implementation of OCSP Stapling or as preparation for a deployment of OCSP Must-Staple. It gives you a reliable way to test your website from the perspective of the visiting browser with no additional overhead.
Easy to enable
Provides valuable information
Discover configuration issues with your site
Learn about privacy and performance impacts
Enabling Expect-Staple is a simple case of issues the appropriate HTTP response header and in monitor mode there is no risk or adverse experience possible.
Once enabled you will only receive reports when your visitors experience an error on your site, an event you really want to know about.
Per Month*
Best Emerging Technology 2018
"This is a completely new source of information that sites can use to better protect themselves and their visitors"
View our certification
