Comment by _qulr

> If you'd like to block the notarization check, you can block trustd (/usr/libexec/trustd) access to ocsp.apple.com

Technically speaking, OCSP and notarization are two different things. The notarization check is actually to https://api.apple-cloudkit.com by /usr/libexec/syspolicyd