Given that OpenSSL has supported SHA-2 since 2005, and the Mac App Store was announced in 2010, then released in 2011, I&#x27;m really not sure you can blame Apple for thinking it&#x27;d be reasonable to expect App Developers to not be using 5 year old versions of dependencies.