Light

Episode #986 Quiz

How Revoking!
Date: 2024-08-06 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Steve analyzed PKfail Platform Key misuse and built IsBootSecure?, a Windows utility that detects BIOS versus UEFI, Secure Boot status, and extracts motherboard Platform Key certificates. He also explained Firefox’s Total Cookie Protection, W3C’s call to remove third-party cookies, CrowdStrike litigation, and DigiCert’s compliant revocation of 83,267 certificates.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In Steve Gibson’s description of IsBootSecure?, what exact combination of conditions is required before the tool will extract and display the motherboard Platform Key certificate?

Question 1

In Steve Gibson’s description of IsBootSecure?, what exact combination of conditions is required before the tool will extract and display the motherboard Platform Key certificate?

The system must be in BIOS mode and Secure Boot must be enabled The system must be in UEFI mode and Secure Boot must be enabled The system must be in UEFI mode and third-party cookies must be disabled The system must be in UEFI mode and PowerShell script blocking must remain enabled

Question 2: What did Steve say was the key reason his updated Cookie Forensics test would be needed to verify Firefox’s behavior correctly?

Question 2

What did Steve say was the key reason his updated Cookie Forensics test would be needed to verify Firefox’s behavior correctly?

Firefox now requires DNS-based cookie approval, which his test never queries Firefox now encrypts all cookies with a new browser-only key that his test cannot decrypt Firefox now blocks all cookies by default, which his test falsely reports as third-party acceptance Firefox now isolates cookies per first-party site, which his 22-year-old test does not understand

Question 3: According to Mozilla’s explanation as quoted by Steve, what is the default Firefox behavior when a third-party site requests permission to use cross-site cookies for important functionality?

Question 3

According to Mozilla’s explanation as quoted by Steve, what is the default Firefox behavior when a third-party site requests permission to use cross-site cookies for important functionality?

Firefox allows the request five times or up to 1% of unique sites in a session, whichever is larger Firefox allows the request once per browsing session without prompting the user Firefox allows the request only after the user manually adds a DNS exception for the domain Firefox allows the request indefinitely as long as the user has not visited private browsing mode

Question 4: What was the specific technical omission DigiCert discovered in its certificate validation process that triggered the mass revocation?

Question 4

What was the specific technical omission DigiCert discovered in its certificate validation process that triggered the mass revocation?

It failed to renew the certificate chain before querying the customer domain It failed to verify the certificate serial number against the CA/Browser Forum list It failed to prepend an underscore to some CNAME-based random validation values It failed to include a SHA-256 signature on some validation DNS records

Question 5: What did Steve say happened when he tested revoked.grc.com with ordinary web browsers?

Question 5

What did Steve say happened when he tested revoked.grc.com with ordinary web browsers?

The browsers blocked the page because the certificate was expired rather than revoked The browsers displayed the page normally and did not recognize the certificate as revoked The browsers warned only when OCSP stapling was disabled on the server The browsers rejected the page only in private browsing mode but not in normal mode

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.