3 ms·
Are you sure? Perhaps it changed at some point - that could be the case. Apple employee Quinn "The Eskimo" states clearly here that the network check is done on
by mike_hearn 4y ago
Are you sure? Perhaps it changed at some point - that could be the case. Apple employee Quinn "The Eskimo" states clearly here that the network check is done only if not stapled:
https://developer.apple.com/forums/thread/116812 https://developer.apple.com/forums/thread/116812
Apple can revoke tickets without synchronously checking on every first launch. Mac malware isn't that common, so they could easily use a CRL pushed to clients (for example) on a regular schedule.
- lapcat 4y ago> Are you sure? Yes. This can be verified with a packet trace. It can also be verified visually. Download a notarized stapled app, disable your internet connection, and launch the app. You'll see a Gatekeeper dialog like this: "Safari downloaded this file on [date]. As of [date], Apple checked it for malicious software and none was detected." Notice "As of [date]". Then press Cancel, re-enable your internet, and launch the app again. This time "As of [date]" is gone! It's phoned home to check.
- mike_hearn 4y agoThat's interesting to know, thanks. I wonder if they changed this, or if Quinn was not aware of exactly how it was used when he gave his answer.
- lapcat 4y agoWell, notarization was optional for most Mac apps on macOS 10.14 Mojave but required on 10.15 Catalina.