On: Apple memory holed its broken promise for an OCSP ...

[wkat4242]

Yes you can. If there's no network it will skip the check.

It's not very practical though. Better to block the address with little snitch or a hosts file

[lightedman → wkat4242]

HOSTS hasn't worked very well for a long time, the OS often ignores it.

[latexr → lightedman]

Do you have a source? I regularly use /etc/hosts and never saw any inkling of it being ignored, but do see plenty of cases that confirm it is not.

[shakna → latexr]

Safari, when using the "iCloud Private Relay", does ignore the hosts file. Not obvious to everyone, but does kinda make sense.

[latexr → shakna]

I just tested this, and it’s even worse than your description. Safari ignores /etc/hosts even when Private Relay is off.

[jshier → latexr]

I think it's the "first to connect" logic between IPv4 and IPv6. Saw an article recently that said when the address being connected to has both addresses, hosts doesn't work unless you map both there, otherwise the unmapped address will connect.

[lightedman → jshier]

That doesn't explain this happening on systems with 2009 Windows 7-era hardware which is only IPv4 capable, like one of my systems - I've noticed HOSTs being ignored for many, many years.

[lightedman → latexr]

I totally blocked the internet in HOSTs. Blackholed everything to 127.0.0.1

Guess what I'm doing right now? Talking to you on HN.

[wkat4242 → lightedman]

Oh ok thanks! I didn't know that, I've used it for other stuff but mainly third party software. I've never tried to block this.