On: Warning: DNS encryption in Little Snitch 6.1 may o...

[xyst]

If I recall, Apple deprecated use of certain network apis for third party developers. But Apple’s own apps (App Store) do not have these same restrictions. Thus, when trying to filter network traffic via app firewall via new APIs. It would fail since App Store uses legacy APIs.

Maybe part of this old bug (that I thought was fixed)

[newaccount74 → xyst]

getaddrinfo() is not a legacy API, it's a standard cross platform API for doing DNS lookups.

[indrora → newaccount74]

Specifically defined by POSIX: https://pubs.opengroup.org/onlinepubs/9699919799/functions/g...

[keyboardcaper → newaccount74]

Funny how that goes: macOS is POSIX certified but no other desktop BSD or Linux is.

[ajross → keyboardcaper]

There have been POSIX-certified Linux variants. But the open source projects you use don't bother (for obvious reasons) and commercial derivatives like Android and ChromeOS don't need it. Similarly Window NT was POSIX-certified way back in the day yet its descendants aren't, even though they implement the same API set (via very different technology).

[spookie → keyboardcaper]

Because it's an expensive and lengthy process. And every version would need to be re-certified.

[vbezhenar → keyboardcaper]

According to https://www.opengroup.org/openbrand/register/ macOS 15 is not certified.

[trillic → newaccount74]

It's POSIX which Apple generally abides by except for timer_create. macOS is historically officially a UNIX, which would require getaddrinfo.

[nox101 → newaccount74]

it is apparently on Mac and arguably with good reason. See this comment https://news.ycombinator.com/item?id=41572770