4 ms·
Any idea how they changed the cache time remotely? If the OS is honouring the cache control headers of a plain text response this has its own security implicati
by theginger 6y ago
Any idea how they changed the cache time remotely?
If the OS is honouring the cache control headers of a plain text response this has its own security implications.
- angry_octet 6y agoThe response is signed by Apple, and presumably (!) your Mac is validating that signature correctly. I haven't checked if they are using stapling, but that would be the sensible way to do it, in which case it is a server side parameter (though possibility with client side limits too, but you'd need to disassemble the binary).
- _qulr 6y agoThe OCSP response has a nextUpdate field: https://www.ietf.org/rfc/rfc2560.txt https://www.ietf.org/rfc/rfc2560.txt