News for hackers. Stuff that matters.
Re:Does Apple really log every app you run? A technical look by samatman on Saturday November 14, 2020 @10:15PM (#25097901)
Yeah, that confused me as well.

Even if there was some wrinkle about the loop argument that I didn't understand, and HTTPS is out: Apple could encrypt the base64 payload, and the sniffable info is reduced to which computer is phoning home, which is something that someone with the ability to middle comms probably knows already.

"roll your own encryption and send it over HTTP" is a bad idea in general but... this is Apple, they can and do implement encryption. Why not here?

Re:Does Apple really log every app you run? A technical look by brabel on Sunday November 15, 2020 @02:58AM (#25099206)
The OCSP RFC[1] specifies that if requests are made using HTTP, they MAY be protected via TLS or "some other lower-layer protocol".

[1] https://tools.ietf.org/html/rfc6960#appendix-A.1