Clear-text is the OSCP mechanics. This is nothing to do with Apple or MacOS. Potentially it could now be tackled with DNSSEC + DoH similar to the records ESNI

Clear-text is the OSCP mechanics. This is nothing to do with Apple or MacOS. Potentially it could now be tackled with DNSSEC + DoH similar to the records ESNI/ECH puts in the DNS to encrypt initial HTTPS client hellos. But the loop issue is quite real. How can you validate the certificate the OSCP server gives you has not been revoked, using OSCP???