> If you're talking about Nov 2021 when Apple's Gatekeeper servers went down, apps weren't just delayed, they were unable to be opened _at all_ unless you block

> If you're talking about Nov 2021 when Apple's Gatekeeper servers went down, apps weren't just delayed, they were unable to be opened _at all_ unless you blocked DNS requests to the server or completely disabled your internet connection. IIRC, Gatekeeper responses are cached for some amount of time for each app, so most people were still able to launch a given app. But yeah, you'd have to disable DNS or internet if you were unlucky and the cache had expired. Apple's failure inspired me to research compressed CRLs. These don't have the same privacy problems as OCSP, and they work offline. As far as I can tell they would be a good replacement for OCSP here (and also in most cases on the web) but I don't know how one could convince them to roll them out.