Light

Episode #951 Quiz

Revisiting Browser Trust
Date: 2023-12-05 | Length: 2 hrs | Episode page at twit.tv

About this episode

ICANN’s RDRS standardizes requests for redacted WHOIS data; WhatsApp added Secret Code to hide locked chats behind a distinct password; CISA urged secure-by-design defaults, disabling exposed web interfaces and enforcing authentication; and eIDAS 2.0 would force browsers to trust 43 EU CAs, weakening revocation, transparency, and certificate authority safety.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what is the key operational property of ICANN's new Registration Data Request Service (RDRS)?

Question 1

According to the episode, what is the key operational property of ICANN's new Registration Data Request Service (RDRS)?

It automatically releases redacted WHOIS data to verified law enforcement accounts. It routes every request through ICANN's legal team for manual approval before registrars see it. It standardizes requests for nonpublic gTLD registration data through a single platform. It replaces registrar privacy services by making all domain registration data public again.

Question 2: What did WhatsApp add in the new feature introduced after Chat Lock?

Question 2

What did WhatsApp add in the new feature introduced after Chat Lock?

A unique Secret Code that hides locked chats behind a separate search-based access path. A phone-number-free companion mode for all chats on desktop devices. An automatic archive that deletes locked chats after they are opened once. A mandatory second biometric factor for every encrypted conversation.

Question 3: Which password protected the Unitronics PLCs used in the water-facility compromise discussed in the episode?

Question 3

Which password protected the Unitronics PLCs used in the water-facility compromise discussed in the episode?

The shared installer password admin/admin. The default factory password 1111. A random per-device password printed on each controller. A rotating code generated by the plant's SCADA server.

Question 4: What three operational requirements did CISA's new 'Secure by Design' alert emphasize for web management interfaces?

Question 4

What three operational requirements did CISA's new 'Secure by Design' alert emphasize for web management interfaces?

Move all admin functions to a mobile app, encrypt all backups, and require hardware tokens. Require a VPN for every login, rotate credentials weekly, and log all admin sessions centrally. Disable the interface by default, avoid Internet-exposed operation, and warn that changes add risk. Publish source code publicly, allow anonymous access, and rely on user hardening guides.

Question 5: What was the core practical objection to the EU's Article 45 browser-trust proposal as explained by the episode's cited analysis?

Question 5

What was the core practical objection to the EU's Article 45 browser-trust proposal as explained by the episode's cited analysis?

It would eliminate certificate transparency by replacing it with DNSSEC-based name validation. It would force browsers to trust many more certificate authorities, including ones the browsers would otherwise distrust. It would require browsers to stop supporting TLS 1.3 on all EU websites. It would prevent browsers from removing compromised roots after a CA incident is discovered.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.