Re:macOS has checked app signatures online for over 2 years
by athms on Wednesday November 25, 2020 @12:11PM
(#25211499)
>The requests contain only app hashes.
No, application hashes are never sent. People are confusing OCSP and notarization. The requests sent via OCSP check the developer certificate. Notarization checks are done over HTTPS.
No, application hashes are never sent. People are confusing OCSP and notarization. The requests sent via OCSP check the developer certificate. Notarization checks are done over HTTPS.