From 982e3f9bb80bab03e0316876928707d14403d3c6 Mon Sep 17 00:00:00 2001
From: Michele Cereda <cereda.michele@gmail.com>
Date: Sun, 29 Jan 2023 17:11:26 +0100
Subject: [PATCH] Allow OCSP website for Firefox

---
 rules.lsrules | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/rules.lsrules b/rules.lsrules
index 30853e1..a2a3f43 100644
--- a/rules.lsrules
+++ b/rules.lsrules
@@ -1,5 +1,5 @@
 {
-    "description": "Michele Cereda's Little Snitch rules list.\nRules are tentatively and progressively ordered by process, remote (from more to less specific, then alphabetically), protocol and, finally, port.",
+    "description": "Michele Cereda's Little Snitch rules list.\nRules are ordered here as they appear in Little Snitch's console.",
     "name": "Michele Cereda's Rules List",
     "rules": [
         {
@@ -16,6 +16,14 @@
             "process": "/Applications/Firefox.app/Contents/MacOS/firefox",
             "remote-domains": "imasdk.googleapis.com"
         },
+        {
+            "action": "allow",
+            "notes": "Allow Firefox to check certificates.",
+            "ports": "80",
+            "process": "/Applications/Firefox.app/Contents/MacOS/firefox",
+            "protocol": "tcp",
+            "remote-hosts": "ocsp.pki.goog"
+        },
         {
             "action": "deny",
             "notes": "Stop Firefox from connecting to google-analytics.com.",