Home▸Cybersecurity▸Certificate Revocation Race: CRL vs OCSP vs Stapling

Certificate Revocation Race: CRL vs OCSP vs Stapling

Interactive 3D simulator of smart-certificate revocation checking: watch a hardware-bound PKI certificate get revoked and race CRL polling, live OCSP queries, and OCSP stapling to see which method detects it first and what each leaks to the network.

Cybersecurity3DModerate60 FPS

This simulator visualizes the security model behind smart, hardware-bound PKI certificates — a chain of trust from Root CA through Intermediate CA to a leaf certificate whose private key never leaves its secure element — and races the three real-world methods a client uses to learn a certificate has been revoked: periodic CRL downloads, live per-connection OCSP queries, and server-side OCSP stapling. Trigger a revocation, tune the network RTT and refresh interval, and watch each method's detection latency and privacy footprint play out as animated packets on a live 3D network topology.

⚙ Under the hood

Interactive 3D simulator of smart, hardware-bound PKI certificates: trigger a revocation and race CRL polling, live OCSP queries, and OCSP stapling to see which method detects it first and what each leaks about the client.

cybersecurityPKIcertificatesOCSPTLShardware security

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install