I also stated that when I first install an App, that ocspd connects, but after if check the certs, that port is closed until the next round of updates or App installations. El Capitan (like profile provisioning introduced in Sierra), but there are real and technical issues/reasons why I run my machines the way I do. Maybe you (Thinine) aren't up-to-speed on all the technical changes in Sierra vs. Also a great read on 9to5mac's site.ĩto5mac's article on Sierra's treatment of expired certificates: OpenSnitch allows you to create rules for which apps to allow to access the internet and. The main thing that OpenSnitch does is track internet requests made by applications you have installed.

OpenSnitch is created by Simone Margaritelli, also known as evilsocket. The guys over at 1Password had a great blog on the subject. Little Snitch, in turn, is an application firewall designed solely for Mac OS.

If a Developer's Certificate is not renewed (by the yearly timestamp, among some other technical behind the scenes activities) with Sierra, it will actually de-activate that App, where-as in El Capitan, the App will continue to run without issues. Sierra treats Apple Certificates different than El Capitan, and unless there is malicious code running on that 'already approved App' for instance - from the Apps store, it doesn't need to be active. OCSPD does NOT need to be checking into Apple more than 3 times a day (which if you tracked the daemons' activities, it tends to do). Little Snitch Protects your privacy and prevents your private data from being sent out to the Internet without your knowledge. I'm more of a 'to each their own' type of person, but to call it stupid is over-the-top reaction-ism.

Little snitch software