Does Apple really log every app you run? A technical look

Re:Does Apple really log every app you run? A technical look by theginger on Sunday November 15, 2020 @03:54AM (#25099466)

Any idea how they changed the cache time remotely? If the OS is honouring the cache control headers of a plain text response this has its own security implications.

[ Parent | on HN ]

Re:Does Apple really log every app you run? A technical look by _qulr on Sunday November 15, 2020 @06:06AM (#25100186)

The OCSP response has a nextUpdate field: https://www.ietf.org/rfc/rfc2560.txt

[ Parent | on HN ]

Re:Does Apple really log every app you run? A technical look by angry_octet on Sunday November 15, 2020 @05:06AM (#25099822)

The response is signed by Apple, and presumably (!) your Mac is validating that signature correctly. I haven't checked if they are using stapling, but that would be the sensible way to do it, in which case it is a server side parameter (though possibility with client side limits too, but you'd need to disassemble the binary).

[ Parent | on HN ]