The check consists of an HTTP GET request (port 80, unencrypted!) to ocsp.apple.com
Am I missing something? Is this still the case?
Seems like an obvious privacy issue, to be able to identify if an user is launching apps from a certain developer just by doing very basic packet capture.
Seems like an obvious privacy issue, to be able to identify if an user is launching apps from a certain developer just by doing very basic packet capture.