> What about uploading every binary you run to their server to check if its “approved”? My understanding was macOS only checked the signature of third party ex

> What about uploading every binary you run to their server to check if its “approved”? My understanding was macOS only checked the signature of third party executables before first run. Windows may let you run it first, but any unknown executable (not just a hash, the file itself) gets sent to Microsoft by default. [0] [0] https://medium.com/sensorfu/how-my-application-ran-away-and-called-home-from-redmond-de7af081100d https://medium.com/sensorfu/how-my-application-ran-away-and-...