Critter’s Code

This morning I decided to take the plunge and perform the 10.5.7 update for my Mac. Mind you… I say take the plunge. I get no where as nervous running an update on my Mac as I did my PC’s *shrug* just sayin..

After it rebooted I started to get a notification from little snitch that “ocspd” wanted to connect to “EVIntl-ocsp.verisign.com” on port 80. I wasn’t sure what this was, but I did know that it never occurred prior to the update. A little interweb searching brought me to this Apple discussion post, where someone stated what “ocspd” was.

ocspd is the “Online Certificate Status Protocol” daemon that processes all certificate validation. This handles both CRL – Certificate Revocation Lists & OCSP – Online Certificate Status Protocol validation of certificates. It’s part of both the part of the Keychain and certificate framework. Verisign is one of the common providers of Internet certificates so it’s one of the services the ocspd process will contact for certificate updates and verification.

You do want to allow this process to connect, yes. Only if it were attempting to contact some completely unknown site would it be cause for followup to verify the site.

Now, of course, they could be full of shit and have no idea what they are talking about, but since it’s on the internet, we all know it is true.

So… since it’s not illegal software that we are trying to block from contacting it’s website.. you should be alright.

Anyway… it’s been ages.. hugs and kisses to you all.