3 ms·

>The requests contain only app hashes. No, application hashes are never sent. People are confusing OCSP and notarization. The requests sent via OCSP check the

by athms 6y ago

>The requests contain only app hashes. No, application hashes are never sent. People are confusing OCSP and notarization. The requests sent via OCSP check the developer certificate. Notarization checks are done over HTTPS.