> Fernet's first nine bytes are public: version byte 0x80 plus an 8-byte big-endian Unix timestamp. So the mint time of any of these tokens is recoverable without OpenAI's key:

This bit reminded me of efforts to decode Google's gclid parameter.

https://deedpolloffice.com/blog/articles/decoding-gclid-para...