Unverified50% confidenceFactExact time
macOS's OCSP requests were at the time sent in plaintext HTTP, theoretically allowing a network man-in-the-middle to learn which applications a user had opened.
1
Sources
50%
Confidence
Long-term
Relevance
8/4/2026
First Seen
Sources
苹果Mail发送非iCloud邮件时为何连接iCloud服务器？原因解析
Related Claims
UnverifiedOCSP (Online Certificate Status Protocol) is used to verify in real time whether a digital certificate has been revoked; when macOS's Gatekeeper launches an application, it sends a query request to Apple's OCSP server (ocsp.apple.com).77% similarUnverifiedmacOS的Accessibility API通过Mach端口消息传递机制与WindowServer通信获取窗口结构化元数据，该通道在设计上隔离于帧缓冲区访问路径之外65% similarUnverifiedmacOS file-opening behavior is built on the Launch Services framework, where applications declare the file types they can handle (defined by UTIs) via Info.plist at installation time.65% similarUnverifiedmacOS provides an Accessibility API and system-level event listening mechanisms, allowing authorized apps to obtain context such as the active window, document title, and URL without invasive screenshots64% similarUnverifiedIn macOS's native file association mechanism, one UTI can only be bound to one default application and does not support dynamic decisions based on path, project context, or user state.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/685386API
curl https://kongchang.com/api/v1/knowledge/claims/685386MCP
get_claim(id=685386)