{"id":36244,"date":"2022-06-16T15:38:23","date_gmt":"2022-06-16T19:38:23","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=36244"},"modified":"2022-06-17T14:27:11","modified_gmt":"2022-06-17T18:27:11","slug":"apple-reneged-on-ocsp-privacy","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2022\/06\/16\/apple-reneged-on-ocsp-privacy\/","title":{"rendered":"Apple Reneged on OCSP Privacy"},"content":{"rendered":"

Jeffrey Paul<\/a>:<\/p>\n

\n

In the current version of macOS, Monterey, on every system update on a system containing an M1 chip, such as all the new shiny\/fast ARM (“Apple Silicon”) macs, the update process phones home to Apple to obtain a special boot signature, known in Apple jargon as a “ticket”.<\/p>\n<\/blockquote>\n\n

Jeff Johnson<\/a>:<\/p>\n

\n

In response to the Mac OCSP appocalypse [with Big Sur], Apple promised several changes<\/a>.<\/p>\n

[…]<\/p>\n

The first change was accomplished: macOS switched from using the unencrypted http ocsp.apple.com<\/code> service to the new encrypted https ocsp2.apple.com<\/code> service.<\/p>\n

[…]<\/p>\n

The third change, a new preference for users to opt out, is still nowhere to be found, not even in the new macOS 13 Ventura beta. The System Preferences app itself has been redesigned and renamed on Ventura<\/a>, yet the promised new preference is missing, more than a year and half after Apple made these promises.<\/p>\n<\/blockquote>\n\n

Previously:<\/p>\n