In this episode, we explore the arrival of passwordless Google accounts that use "passkeys," which offer enhanced usability and security. We discuss the benefits of passkeys over traditional passwords, but also why passkeys are not quite ready for prime time use.

Next, we discuss Google Domains' introduction of new top-level domains (TLDs) like .zip and .mov, raising concerns about the potential use for malicious activities. We separate fact from fiction, and discuss the real risks involved.

Lastly, we examine Twitter's long-awaited encrypted direct messaging feature. We explore the limitations and criticisms surrounding its implementation, highlighting the importance of true end-to-end encryption solutions like Signal.

Show notes: https://sharedsecurity.net/2023/05/22/google-now-supports-passkeys-risky-new-top-level-domains-twitters-encryption-dilemma/