A convenient utility to check secure connections under ATS using the nscurl command tool. For El Capitan to Monterey.
certificates
A detailed walk through the log shows Safari 15 checking Safe Browsing, phishing sites using ML, and performing trust evaluation of certificates.
It should have been so easy: a quick change of Root certificate. So why all the chaos, and most of all why you mustn’t compromise your security as a result.
Why do we keep having problems with security certificates when they’re just supposed to work? A look at what they do, and they work.
Did you think it was only old Mac OS X affected by the Let’s Encrypt certificate expiry problem? No, it’s Safari wherever you can use it. Here’s how to deal with it.
If you’re still running El Capitan, or any version of Mac OS X prior to 10.12.1, then you’re […]
Nine months ago, Apple undertook to make changes in the way in which macOS checks its OCSP service for certificate revocations. Has it changed anything yet?
From the start of voluntary code signing in 2007, defences against malware in macOS have changed dramatically. Here’s an overview of what has happened.
Why does it take 2 years to realise that macOS has been checking signing certificate validity online?
How macOS checks executable code before it’s loaded and run, in macOS 10.15 and 11.0. Covering integrity checks using hashes, and validity of the signing certificate, on Intel and ARM.
The Eclectic Light Company 