2 ms·
> The check consists of an HTTP GET request (port 80, unencrypted!) to ocsp.apple.com with a path that is both Base64 encoded and URL encoded. Interesting. Thi
by tgsovlerkhgsel 6y ago
> The check consists of an HTTP GET request (port 80, unencrypted!) to ocsp.apple.com with a path that is both Base64 encoded and URL encoded.
Interesting. This means OSX leaks which apps you run unencrypted on the network.
- tatersolid 6y agowindows and web browsers do this as well via OSCP. Linux distros also do this via package manager traffic and update checks. Apt/rpm traffic is unencrypted, relying on a separate payload signature scheme for authenticity (same as OSCP).