<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>OCSP on Answer</title>
    <link>https://answer.freetools.me/tags/ocsp/</link>
    <description>Recent content in OCSP on Answer</description>
    <generator>Hugo -- 0.152.2</generator>
    <language>zh-cn</language>
    <lastBuildDate>Sat, 07 Mar 2026 06:21:54 +0800</lastBuildDate>
    <atom:link href="https://answer.freetools.me/tags/ocsp/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>HTTPS连接背后的信任链：SSL证书验证是如何工作的？</title>
      <link>https://answer.freetools.me/https%E8%BF%9E%E6%8E%A5%E8%83%8C%E5%90%8E%E7%9A%84%E4%BF%A1%E4%BB%BB%E9%93%BEssl%E8%AF%81%E4%B9%A6%E9%AA%8C%E8%AF%81%E6%98%AF%E5%A6%82%E4%BD%95%E5%B7%A5%E4%BD%9C%E7%9A%84/</link>
      <pubDate>Sat, 07 Mar 2026 06:21:54 +0800</pubDate>
      <guid>https://answer.freetools.me/https%E8%BF%9E%E6%8E%A5%E8%83%8C%E5%90%8E%E7%9A%84%E4%BF%A1%E4%BB%BB%E9%93%BEssl%E8%AF%81%E4%B9%A6%E9%AA%8C%E8%AF%81%E6%98%AF%E5%A6%82%E4%BD%95%E5%B7%A5%E4%BD%9C%E7%9A%84/</guid>
      <description>深度解析SSL/TLS证书验证的完整技术流程，从X.509证书结构、信任链构建、根证书存储、证书吊销检查机制到证书透明度日志，揭示浏览器如何在毫秒级时间内验证网站身份的真实过程。</description>
    </item>
    <item>
      <title>被吊销的HTTPS证书为何仍然可信？从软失败陷阱到CRLite的二十年技术突围</title>
      <link>https://answer.freetools.me/%E8%A2%AB%E5%90%8A%E9%94%80%E7%9A%84https%E8%AF%81%E4%B9%A6%E4%B8%BA%E4%BD%95%E4%BB%8D%E7%84%B6%E5%8F%AF%E4%BF%A1%E4%BB%8E%E8%BD%AF%E5%A4%B1%E8%B4%A5%E9%99%B7%E9%98%B1%E5%88%B0crlite%E7%9A%84%E4%BA%8C%E5%8D%81%E5%B9%B4%E6%8A%80%E6%9C%AF%E7%AA%81%E5%9B%B4/</link>
      <pubDate>Sat, 07 Mar 2026 04:48:34 +0800</pubDate>
      <guid>https://answer.freetools.me/%E8%A2%AB%E5%90%8A%E9%94%80%E7%9A%84https%E8%AF%81%E4%B9%A6%E4%B8%BA%E4%BD%95%E4%BB%8D%E7%84%B6%E5%8F%AF%E4%BF%A1%E4%BB%8E%E8%BD%AF%E5%A4%B1%E8%B4%A5%E9%99%B7%E9%98%B1%E5%88%B0crlite%E7%9A%84%E4%BA%8C%E5%8D%81%E5%B9%B4%E6%8A%80%E6%9C%AF%E7%AA%81%E5%9B%B4/</guid>
      <description>深入剖析TLS证书撤销机制的结构性困境。从Heartbleed事件后87%易受攻击证书未被撤销的惊人数据出发，揭示CRL和OCSP的设计缺陷、软失败策略的致命漏洞、Chrome CRLSets与Firefox CRLite的技术分歧，以及Let&amp;#39;s Encrypt终结OCSP、证书有效期缩短至47天等最新行业变革。</description>
    </item>
  </channel>
</rss>
