News for hackers. Stuff that matters.

A comment on It seems that OpenAI is scraping [certificate transparency] logs. Parent comment

Re:It seems that OpenAI is scraping [certificate transparenc... by jsheard on Monday December 15, 2025 @10:59AM (#46276181)
Yep, but next year they intend to launch an alternative DNS challenge which doesn't require changing DNS records with every renewal. Instead you'll create a persistent TXT record containing a public key, and then any ACME client which has the private key can keep requesting new certs forever.

https://letsencrypt.org/2025/12/02/from-90-to-45#making-auto...

[ Parent | on HN ]
Re:It seems that OpenAI is scraping [certificate transparenc... by Ajedi32 on Monday December 15, 2025 @11:21AM (#46276531)
Oh, sweet! I didn't know about this. I have no need of wildcard certs, but this will greatly simplify the process of issuing certificates for internal services behind my local firewall. No need to maintain an acme-dns server; just configure the ACME client, set the DNS record and you're done? Very nice.
[ Parent | on HN ]
Re:It seems that OpenAI is scraping [certificate transparenc... by 8cvor6j844qw_d6 on Monday December 15, 2025 @11:59AM (#46277062)
Great to hear, one less API keys needed for the DNS records.
[ Parent | on HN ]