Hasty Briefsbeta

It seems that OpenAI is scraping [certificate transparency] logs

a day ago
  • #Privacy
  • #Certificate Transparency
  • #TLS
  • OpenAI's search bot quickly accessed a new TLS certificate by scraping CT logs.
  • Discussion on Certificate Transparency (CT) logs reveals concerns about domain enumeration and privacy.
  • Proposal to use hash(domain, nonce) in CT logs for privacy, countered by the need for full transparency.
  • Use of wildcard certificates suggested as a workaround for domain privacy issues.
  • Debate on the utility of DNSSEC and NSEC3 in enhancing domain security and privacy.