lowendbeholder
Re:Does Apple really log every app you run? A technical look
on Saturday November 14, 2020 @09:31PM (#25097699)
The loop argument makes no sense at all. HTTP is being used as a transport for a base64-encoded payload, the actual process of veryfing the validity of the developer certificate is done by the service behind that Apple URL - not by the HTTP stack.
There is no justification not to switch to HTTPS here.