> Apple committed in writing a few major versions (i.e. ~3 years ago) to providing a preference setting for disabling online OCSP checks in macOS when I made a

> Apple committed in writing a few major versions (i.e. ~3 years ago) to providing a preference setting for disabling online OCSP checks in macOS when I made a stink about it, within one year. Not only did this not happen within a year (a rare instance of Apple actually outright lying), but someone was kind enough to write me and tell me that Apple has edited the webpage to remove this promise. (emphasis mine) https://support.apple.com/en-us/HT202491 https://support.apple.com/en-us/HT202491 Fortunately an older version was archived: https://archive.ph/yhThW https://archive.ph/yhThW I believe the part that was removed is near the bottom: > In addition, over the the next year we will introduce several changes to our security checks: > - A new encrypted protocol for Developer ID certificate revocation checks > - Strong protections against server failure > - A new preference for users to opt out of these security protections Definitely a curious turn of events.