# What is HTTPS / TLSv1.3 Certificate?

## LiteSpeed SSL Features

### Forward Secrecy

[Forward Secrecy](https://en.wikipedia.org/wiki/Forward_secrecy "https://en.wikipedia.org/wiki/Forward_secrecy") protects data at the network transport layer by ensuring that past communications cannot be decrypted even if secret keys are compromised. LiteSpeed achieves this by regularly rotating the SSL session ticket automatically.### SSL Renegotiation Protection

Generating an SSL key incurs significant overhead and can crash a server if run continuously. LiteSpeed's [SSL renegotiation protection](https://www.litespeedtech.com/docs/webserver/config/listener-ssl#renegProtection "https://www.litespeedtech.com/docs/webserver/config/listener-ssl#renegProtection") limits the number of times a client can renegotiate SSL material and fills this gap.### Downgrade Attack Prevention

LiteSpeed supports [TLS\_FALLBACK\_SCSV](https://datatracker.ietf.org/doc/rfc7507/ "https://datatracker.ietf.org/doc/rfc7507/"), a Signaling Cipher Suite Value (SCSV) that prevents TLS protocol downgrade attacks.### OCSP Stapling

OCSP (Online Certificate Status Protocol) allows the issuer of a certificate to ["stitch"](https://en.wikipedia.org/wiki/OCSP_stapling "https://en.wikipedia.org/wiki/OCSP_stapling") a time-stamped, CA-signed OCSP response to the initial TLS handshake. This eliminates the need for clients to contact the CA, potentially improving both security and performance.### Security Against Known Vulnerabilities

When new vulnerabilities in SSL are exploited, LiteSpeed acts quickly (often within hours) to ensure your websites are protected. LiteSpeed currently offers protection against these known vulnerabilities and remains vigilant for future potential threats:   
  
- [DROWN](https://en.wikipedia.org/wiki/DROWN_attack "https://en.wikipedia.org/wiki/DROWN_attack")
- [BEAST attack](https://en.wikipedia.org/wiki/Transport_Layer_Security#BEAST_attack "https://en.wikipedia.org/wiki/Transport_Layer_Security#BEAST_attack")
- [CBC padding oracle attacks](https://nvd.nist.gov/vuln/search/results?form_type=Basic&results_type=overview&query=poodle&search_type=all "https://nvd.nist.gov/vuln/search/results?form_type=Basic&results_type=overview&query=poodle&search_type=all")
- [heart bleed](https://en.wikipedia.org/wiki/Heartbleed "https://en.wikipedia.org/wiki/Heartbleed")
- [Ticketbleed](https://nvd.nist.gov/vuln/detail/CVE-2016-9244 "https://nvd.nist.gov/vuln/detail/CVE-2016-9244")
- [ROBOT](https://robotattack.org/ "https://robotattack.org/")