Re:It seems that OpenAI is scraping [certificate transparenc...
by mh- on Monday December 15, 2025 @04:05PM
(#46280638)
Unintended: agreed. Unexpected: plenty of us called out this inevitability when the CT proposal was circulated.
Re:It seems that OpenAI is scraping [certificate transparenc...
by rcxdude on Monday December 15, 2025 @07:58PM
(#46283341)
The main thing isn't validating the cert you're looking at, per se, it's to validate the activities of the issuers. Mainly that they aren't issuing certificates they aren't supposed to (i.e. you can monitor the logs for your domain to check some random CA you've never done business hasn't issued a cert for it). This is mainly enforced by any violations (i.e. any certificates found that don't show up in the logs) being grounds for being removed from browser's trusted list.
The (presumably) unintended, unexpected purpose of the logs is to provide public notification of a website coming online for scrapers, search engines, and script kiddies to attack it: I could register https://verylongrandomdomainnameyoucantguess7184058382940052... and unwisely expect it to be unguessable, but as it turns out OpenAI is going to scrape it seconds after the certificate is issued.