Weekly Update 510: Live From Mallorca with Scott Helme
Summary
Troy Hunt's weekly podcast episode with Scott Helme, where they launch 'Why no Passkeys?', a successor to 'Why no HTTPS?' that encourages organizations to adopt passkeys for authentication.
<img src="https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-d641b5feb38e/content/images/2026/06/Splash-Template--2-@1x_1.jpg" alt="Weekly Update 510: Live From Mallorca with Scott Helme"><p>How's the view?! Back to business, it's now 8 years ago that Scott and I thought it would be a cool idea to build <a href="https://www.troyhunt.com/why-no-https-heres-the-worlds-largest-websites-not-redirecting-insecure-requests/" rel="noreferrer">Why no HTTPS?</a> We used the site to shame companies for not implementing their transport later security property, and to make it a bit of fun, we shamed by country as well. This helped people jump on the bandwagon of giving their respective countries a little "encouragement", and we hope they'll do the same now with <a href="https://whynopasskeys.com/?ref=troyhunt.com" rel="noreferrer">Why no Passkeys?</a> Following <a href="https://www.troyhunt.com/a-sneaky-phish-just-grabbed-my-mailchimp-mailing-list/" rel="noreferrer">my infamous phishing incident last year</a>, I registered the domain with the intent of building the successor for the TLS version. However, due to a combination of me having no time and Scott getting very good with Claude Code, he's now stood up this project solo and done a wonderful job of it. Go and check it out, and give those big names from your country a little push.</p>
<!--kg-card-begin: html-->
<div><div style="width: 170px; display: inline-block; margin-right: 3px;"><a href="https://itunes.apple.com/au/podcast/troy-hunts-weekly-update-podcast/id1176454699?ref=troy-hunt"><img src="https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-d641b5feb38e/content/images/2018/05/Listen-on-Apple-Podcasts.svg" alt="Weekly Update 510: Live From Mallorca with Scott Helme"></a></div><div style="width: 175px; display: inline-block; margin-right: 3px;"><a href="https://www.youtube.com/playlist?list=PL7LAAxaabizMAXnJe0s3xjQ30q12EVmjt&ref=troyhunt.com"><img src="https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-d641b5feb38e/content/images/2024/09/Watch-and-Listen-on-YouTube.svg" alt="Weekly Update 510: Live From Mallorca with Scott Helme"></a></div><div style="width: 118px; display: inline-block; margin-right: 3px;"><a href="https://open.spotify.com/show/7jMtKFohdrw6qmz8AkLqit?ref=troy-hunt"><img src="https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-d641b5feb38e/content/images/2019/10/spotify.svg" class="kg-image" alt="Weekly Update 510: Live From Mallorca with Scott Helme"></a></div><div style="width: 120px; display: inline-block;"><a href="https://omny.fm/shows/troy-hunt-weekly-update/playlists/podcast.rss?ref=troy-hunt"><img src="https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-d641b5feb38e/content/images/2018/07/Download-via-RSS.svg" alt="Weekly Update 510: Live From Mallorca with Scott Helme"></a></div><iframe width="100%" height="480" src="https://www.youtube.com/embed/AaWU8w-JMqg" title="YouTube video player" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen loading="lazy" spellcheck="false"></iframe></div>
<!--kg-card-end: html-->
View Cached Full Text
Cached at: 06/30/26, 05:17 PM
# Weekly Update 510: Live From Mallorca with Scott Helme
Source: [https://www.troyhunt.com/weekly-update-510/](https://www.troyhunt.com/weekly-update-510/)
How's the view?\! Back to business, it's now 8 years ago that Scott and I thought it would be a cool idea to build[Why no HTTPS?](https://www.troyhunt.com/why-no-https-heres-the-worlds-largest-websites-not-redirecting-insecure-requests/)We used the site to shame companies for not implementing their transport later security property, and to make it a bit of fun, we shamed by country as well\. This helped people jump on the bandwagon of giving their respective countries a little "encouragement", and we hope they'll do the same now with[Why no Passkeys?](https://whynopasskeys.com/?ref=troyhunt.com)Following[my infamous phishing incident last year](https://www.troyhunt.com/a-sneaky-phish-just-grabbed-my-mailchimp-mailing-list/), I registered the domain with the intent of building the successor for the TLS version\. However, due to a combination of me having no time and Scott getting very good with Claude Code, he's now stood up this project solo and done a wonderful job of it\. Go and check it out, and give those big names from your country a little push\.
[](https://itunes.apple.com/au/podcast/troy-hunts-weekly-update-podcast/id1176454699?ref=troy-hunt)
[](https://www.youtube.com/playlist?list=PL7LAAxaabizMAXnJe0s3xjQ30q12EVmjt&ref=troyhunt.com)
[](https://open.spotify.com/show/7jMtKFohdrw6qmz8AkLqit?ref=troy-hunt)
[](https://omny.fm/shows/troy-hunt-weekly-update/playlists/podcast.rss?ref=troy-hunt)
[Weekly update](https://www.troyhunt.com/tag/weekly-update/)
Similar Articles
Weekly Update 522: Live From Oslo with Scott Helme
Troy Hunt and Scott Helme discuss how Report URI uses CSP reporting to identify malware-infected machines and detect malicious browser extensions with their local OpenClaw instance.
Weekly Update 519: Breaches & Data Integrity
Troy Hunt's weekly update covers his busy week with talks on 3D printing and infosec, data breaches, and IoT projects, focusing on security and data integrity topics.
Weekly Update 516: Live From Vietnam
Troy Hunt's weekly update podcast from Vietnam discusses the Brinks Home data breach, criticizing the company's FAQ for failing to answer basic incident response questions, and outlines the typical extortion pattern involving vishing and OAuth.
Weekly Update 502
Troy Hunt's weekly update discusses how ShinyHunters uses social engineering and vishing to breach major brands, with insights from Mandiant.
Weekly Update 511: Live from my Riad in Marrakech
Troy Hunt's weekly update from Marrakech discusses the futility of trying to remove personal data from data brokers and addresses companies' misguided marketing efforts.