Comment by chrisshroba

It’s better with a trade off. It removes the call-home to Apple, but adds the possibility of false positives for certificate revocation.

Is this in fact the trade-off we’re considering, or am I misunderstanding?