https://mjtsai.com/blog/2022/06/16/apple-reneged-on-ocsp-privacy/

Thursday, June 16, 2022 [Tweets] [Favorites]

Apple Reneged on OCSP Privacy

Jeffrey Paul:

    In the current version of macOS, Monterey, on every system update
    on a system containing an M1 chip, such as all the new shiny/fast
    ARM ("Apple Silicon") macs, the update process phones home to
    Apple to obtain a special boot signature, known in Apple jargon
    as a "ticket".

Jeff Johnson:

    In response to the Mac OCSP appocalypse [with Big Sur], Apple
    promised several changes.

    [...]

    The first change was accomplished: macOS switched from using the
    unencrypted http ocsp.apple.com service to the new encrypted
    https ocsp2.apple.com service.

    [...]

    The third change, a new preference for users to opt out, is still
    nowhere to be found, not even in the new macOS 13 Ventura beta.
    The System Preferences app itself has been redesigned and renamed
    on Ventura, yet the promised new preference is missing, more than
    a year and half after Apple made these promises.

Previously:

  * System Settings
  * Still No Preference to Opt Out of OCSP
  * Apple Server Outage Makes Mac Apps Hang on Launch

Gatekeeper Mac macOS 12 Monterey macOS 13 Ventura Networking Privacy
Security

2 Comments

2 Comments

Bri
June 16, 2022 4:07 PM

My prediction: another year from now Apple finally implements the
ability to opt out, but doing so needlessly and by design causes some
essential part of the system to stop working completely, like iCloud
or the app store or something.

(Have I become too cynical?)

Jeffrey Paul
June 16, 2022 6:53 PM

@Bri anyone who wants privacy from Apple isn't using iCloud
(effectively unencrypted) or the App Store. Why do privacy theater?
If you want privacy, stop using Apple services in the first place.
There are already levers in the OS for disabling iCloud and the App
Store and the other phone-home.

Stay up-to-date by subscribing to the Comments RSS Feed for this
post.

Leave a Comment

[                      ] Name

[                      ] E-mail (will not be published)

[                      ] Web site

[                                                                                ]
[                                                                                ]
[                                                                                ]
[                                                                                ]
[                                                                                ]
[                                                                                ]
[                                                                                ]
[                                                                                ]
[                                                                                ]
[                                                                                ]

[Submit Comment] 

-  -

Blog
Archives
Tag Cloud
Top Posts

@mjtsai
Recently Updated
RSS / Comments
Apple News
Trackback

[                ] [Search]
Support this site via Patreon.

Try my Mac apps:

DropDMGDropDMGDropDMG
EagleFilerEagleFilerEagleFiler
SpamSieveSpamSieveSpamSieve
ToothFairyToothFairyToothFairy
Copyright (c) 2000-2022 Michael Tsai.