4 ms·
While I'm a fan of having a choice (as I consider myself a "power user"), I do think Apple is making the right decision in making certain things (like this OCSP
by aemreunal 6y ago
While I'm a fan of having a choice (as I consider myself a "power user"), I do think Apple is making the right decision in making certain things (like this OCSP check) default-on. It is true that the overwhelming majority of Apple users won't ever know enough of the technical details to make an informed decision about this, nor should they need to know.
Where Apple went wrong, IMHO, is:
1) not giving people a way to opt out (not just for OCSP, but so many power user-hostile decisions they're making recently), and
2) programming it in a poor way where slow responses ground the machine to a halt (it did mine in the middle of the work day, stopping my work completely for 30-45 minutes).
I don't think malice (i.e. greed) was involved in how this whole thing turned out. As Hanlon's Razor states:
Never attribute to malice that which is adequately explained by incompetence.
- sneak 6y agoThey also did wrong by not encrypting the connection, and by not doing it in a privacy-preserving way like with a bloom filter precheck. This is a company that has world class cryptosystem designers on staff, remember. They know how to pcap a fresh install before the GM goes out the door to see if it’s still speaking plain HTTP like OSes did in the years back before we ever heard the name Ed Snowden. Cut them some slack, but not an infinite amount. They can and should well know better, and pledging to delete the logs, encrypt it, and add a knob to turn it off is as close to a “we fucked up” as you’ll ever get from them. I appreciate their response.