Re:It seems that OpenAI is scraping [certificate transparenc...
by poormathskills on Monday December 15, 2025 @11:10AM
(#46276367)
Is it still “scraping” when the purpose of these transparency logs is to be used for this purpose?
[ Parent
| on HN ]
Re:It seems that OpenAI is scraping [certificate transparenc...
by LeifCarrotson on Monday December 15, 2025 @01:22PM
(#46278282)
The ostensible purpose of the certificate transparency logs is to allow validation of a certificate you're looking at - I browse to https://poormathskills.com and want to figure out the details of when its cert was issued.
The (presumably) unintended, unexpected purpose of the logs is to provide public notification of a website coming online for scrapers, search engines, and script kiddies to attack it: I could register https://verylongrandomdomainnameyoucantguess7184058382940052... and unwisely expect it to be unguessable, but as it turns out OpenAI is going to scrape it seconds after the certificate is issued.
Re:It seems that OpenAI is scraping [certificate transparenc...
by mh- on Monday December 15, 2025 @04:05PM
(#46280638)
Unintended: agreed. Unexpected: plenty of us called out this inevitability when the CT proposal was circulated.
Re:It seems that OpenAI is scraping [certificate transparenc...
by rcxdude on Monday December 15, 2025 @07:58PM
(#46283341)
The main thing isn't validating the cert you're looking at, per se, it's to validate the activities of the issuers. Mainly that they aren't issuing certificates they aren't supposed to (i.e. you can monitor the logs for your domain to check some random CA you've never done business hasn't issued a cert for it). This is mainly enforced by any violations (i.e. any certificates found that don't show up in the logs) being grounds for being removed from browser's trusted list.