3 ms·
There was a thread the other day... about this. I believe mapping ocsp.apple.com to 127.0.0.1 on your hosts file will do the trick.
by atmosx 6y ago
There was a thread the other day... about this. I believe mapping ocsp.apple.com to 127.0.0.1 on your hosts file will do the trick.
- LinuxBender 6y agoOh if the question was just blocking the OCSP, then yes, /etc/hosts or null route will do that. That isn't the only data leakage (tracking) that comes out of a mac however. sudo route add -net 17.253.17.0 255.255.255.0 -blackhole also works for the OCSP. You will still get some delay in opening applications. I would like to see apple do OCSP stapling and caching in the OS like reverse proxies already do, but that would defeat the tracking I guess.
- jlgaddis 6y agoAnyone wanting to do the above should first check what ocsp.apple.com resolves to for them -- looks like the responses vary by geographical location.