[asveikau]

I thought they already do this with notarized binaries on macOS. Conceptually it's no different from certificate revocation. The platform can phone home periodically to discover binaries for which notarization has been revoked.

[sandoze]

You may be correct? Then the assumption would be developers need to pay the $99 fee to be part of the Apple dev program (pretty sure that’s the only way to get notarized). Next step in Apple’s playbook might be upping that fee for third party stores?