A caveat to blocking ocsp.apple.com is that I discovered Apple is running more than one service on that domain. http://ocsp.apple.com/ocsp-devid01 http://ocsp.

A caveat to blocking ocsp.apple.com is that I discovered Apple is running more than one service on that domain. http://ocsp.apple.com/ocsp-devid01 http://ocsp.apple.com/ocsp-devid01 is Developer ID, but http://ocsp.apple.com/ocsp03-apevsrsa2g101 http://ocsp.apple.com/ocsp03-apevsrsa2g101 is something else, which if blocked can prevent the Mac App Store from loading.