OSCP traffic on Loopback Interface(Loopback:Lo0)

asked 2021-12-09 10:09:56 +0000

Nilstorm gravatar image

updated 2021-12-09 10:10:15 +0000

Basically, I'm monitoring traffic on a loopback interface on a M1 Mac (macOS Monterey)and some reason I see OCSP traffic??

Can anyone explain the logic of why this is the case and why HTTP/OCSP packets are being sent back to the localhost? I'm assuming this follows after OCSP traffic on the internet device. (i.e networking reasoning)

Could this be a Firewall behaviour. I use ESET with an enabled active Firewall. I theorised ESET is feeding back OCSP Certs to verify them itself? Anyways appreciate someone with knowledge in this chiming in.

edit retag flag offensive close merge delete