←back to thread

Catalina is checking notarization of unsigned executables

(lapcatsoftware.com)
361 points robenkleene | 1 comments | 23 May 20 09:42 UTC | HN request time: 0.427s | source
Show context
usmannk ◴[23 May 20 16:27 UTC] No.23284235[source]▶
There is so much confusion here. The OP and most others are missing one of the biggest points: Look at the packet trace. There is _no data_, not even a hash, being sent. It's a TLS negotiation and then the connection ends. I have to suspect it's a bug...
replies(6): >>23284309 #>>23284481 #>>23284891 #>>23285137 #>>23285544 #>>23287368 #
the_imp ◴[23 May 20 17:47 UTC] No.23284891[source]▶
The Objective-C format strings in the URL would imply that the hash is sent as a path parameter.
replies(1): >>23284908 #
1. usmannk ◴[23 May 20 17:49 UTC] No.23284908[source]▶
That's a string found in the disassembly of syspolicyd (I've found it as well). However, the actual URL you see in the TCP logs has no path whatsoever.