Hacker News Reader

Comment by smoldesu | Hacker News Reader

Until MacOS lets you disable OCSP, I don't think a Mac-native browser can be zero-telemetry.

I'd call that OS telemetry as opposed to browser/application telemetry.

Agreed, I'd be singing a different tune if Orion was available on other OSes.

I believe this might work in your HOSTS file:

    0.0.0.0 ocsp.apple.com

It seems they at least still respect that. Search HN for "ocsp.apple.com" to find a lot more interesting discussion.

This will disable OS updates.

Additionally, macOS talks to the OCSP endpoints of several different CAs, not just Apple.