Light

Episode #998 Quiz

The Endless Journey to IPv6
Date: 2024-10-29 | Length: 2.5 hrs | Episode page at twit.tv

About this episode

Apple’s proposed 45-day certificate maximum would force aggressive automation via ACME and break non-web TLS uses like mail and appliances. Google’s Messages uses on-device AI filtering for scams, links, nudity, and sender verification without exposing encrypted content. IPv6 adoption remains slow because NAT, SNI, and DNS naming scale IPv4.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In the episode’s discussion of Apple’s proposed certificate-lifetime reduction, what specific operational problem did Steve identify for GRC’s email signing setup?

Question 1

In the episode’s discussion of Apple’s proposed certificate-lifetime reduction, what specific operational problem did Steve identify for GRC’s email signing setup?

His mail server could not support ACME at all because ACME only works for browsers, not for email systems. His mail server requires EV certificates, which the proposed schedule would no longer permit for email signing. His mail server uses the same certificate files as the web server, but it has no programmatic way to learn when those files change. His mail server can only validate certificates through OCSP stapling, which the proposed schedule would break immediately.

Question 2: According to the episode, which of the following best describes the architecture of Session messenger that prompted Steve’s interest?

Question 2

According to the episode, which of the following best describes the architecture of Session messenger that prompted Steve’s interest?

A phone-number-based messenger that relies on server-side contact lists to reduce metadata exposure. A Signal-derived messenger that uses decentralized storage servers and onion routing to hide endpoint IP addresses. A Tor-only messenger that routes messages anonymously but does not use public-key cryptography for message contents. A centralized service that stores message metadata on Swiss servers while encrypting content end to end.

Question 3: What was the specific reason the Australian federal law enforcement visit became significant in the episode’s discussion of Session?

Question 3

What was the specific reason the Australian federal law enforcement visit became significant in the episode’s discussion of Session?

It caused Session to abandon onion routing and switch to standard client-server messaging. It led Session to announce that maintenance would move to a neutral organization based in Switzerland. It forced Session to stop supporting Android and focus only on desktop clients. It resulted in Session disclosing user phone numbers to authorities under local law.

Question 4: What was the key contrast Steve drew between the global and U.S. IPv6 adoption curves shown in the APNIC data?

Question 4

What was the key contrast Steve drew between the global and U.S. IPv6 adoption curves shown in the APNIC data?

Global IPv6 adoption was rising, while U.S. adoption had been flat for roughly five years. Global IPv6 adoption was flat, while U.S. adoption kept rising quickly through 2024. Both global and U.S. IPv6 adoption were rising at nearly identical rates. Global IPv6 adoption exceeded 90%, while U.S. adoption remained below 10%.

Question 5: According to Geoff Huston’s argument as presented in the episode, what is now doing much of the work that IPv6 was originally expected to solve?

Question 5

According to Geoff Huston’s argument as presented in the episode, what is now doing much of the work that IPv6 was originally expected to solve?

Carrier NAT and IPv6 transition mechanisms are eliminating the need for DNS-based service selection. Static public IPv4 allocations are still the main mechanism for connecting users to cloud services. DNS names and TLS SNI are increasingly doing the work of service identification and routing. BGP route reflectors and DNSSEC are jointly providing the address-space expansion IPv6 was meant to deliver.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.