[selsta]

OCSP isn't "scanning". It checks if a certificate is revoked.

https://blog.jacopo.io/en/post/apple-ocsp/

[nicce]

My source was bad, scanning is related to antivirus and is better explained on here: https://eclecticlight.co/2020/08/28/how-notarization-works/