Views, Reactions and Impact of Digitally-Signed Mail in e-Commerce

Garfinkel, Simson L.; Schiller, Jeffrey I.; Nordlander, Erik; Margrave, David; Miller, Robert C.

doi:10.1007/11507840_18

Cited by 10 publications

(3 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Furthermore, several studies have explored users' perceptions of email signatures [52], browser security indicators (e.g., [53], [54]), and specific features of specific security tools (e.g., selfdestructing messages in Snapchat [55]). …”

Section: B User Studies Of Secure Communication Toolsmentioning

confidence: 99%

Obstacles to the Adoption of Secure Communication Tools

Abu-Salma

Sasse

Bonneau

et al. 2017

2017 IEEE Symposium on Security and Privacy (SP)

117

View full text Add to dashboard Cite

Abstract-The computer security community has advocated widespread adoption of secure communication tools to counter mass surveillance. Several popular personal communication tools (e.g., WhatsApp, iMessage) have adopted end-to-end encryption, and many new tools (e.g., Signal, Telegram) have been launched with security as a key selling point. However it remains unclear if users understand what protection these tools offer, and if they value that protection. In this study, we interviewed 60 participants about their experience with different communication tools and their perceptions of the tools' security properties. We found that the adoption of secure communication tools is hindered by fragmented user bases and incompatible tools. Furthermore, the vast majority of participants did not understand the essential concept of end-to-end encryption, limiting their motivation to adopt secure tools. We identified a number of incorrect mental models that underpinned these beliefs.

show abstract

Section: B User Studies Of Secure Communication Toolsmentioning

confidence: 99%

Obstacles to the Adoption of Secure Communication Tools

Abu-Salma

Sasse

Bonneau

et al. 2017

2017 IEEE Symposium on Security and Privacy (SP)

117

View full text Add to dashboard Cite

show abstract

“…Garfinkel et al [11,13] demonstrate the potential high success of digitally signed email in an e-commerce context with a a user study. Gaw et al [14] study the social issues that affect the adoption of secure email.…”

Section: Related Workmentioning

confidence: 98%

“…Keeping the intended users in mind (e.g., our current TeraGrid users) as well as the known limitations of common email clients in their ability to provide usable security [13,32], we decided that all subjects must have at least a basic grasp of security concepts. This allowed us to understand how familiarity with tools and concepts, that novices would learn over time, would affect SELS usability and security.…”

Section: Approachmentioning

confidence: 99%

Usable secure mailing lists with untrusted servers

Bobba

Muggli

Pant

et al. 2009

Proceedings of the 8th Symposium on Identity and Trust on the Internet

View full text Add to dashboard Cite

Mailing lists are a natural technology for supporting messaging in multi-party, cross-domain collaborative tasks. However, whenever sensitive information is exchanged on such lists, security becomes crucial. We have earlier developed a prototype secure mailing list solution called SELS (Secure Email List Services) based on proxy encryption techniques [20], which enables the transformation of cipher-text from one key to another without revealing the plain-text. Emails exchanged using SELS are ensured confidentiality, integrity, and authentication. This includes ensuring their confidentiality while in transit at the list server; a functionality that is uniquely supported by SELS through proxy re-encryption. In this work we describe our efforts in studying and enhancing the usability of the software system and our experiences in supporting a production environment that currently is used by more than 50 users in 11 organizations. As evidence of its deployability, SELS is compatible with common email clients including Outlook, Thunderbird, Mac Mail, Emacs, and Mutt. As evidence of its usability, the software is being used by several national and international incident response teams.

show abstract

Secure XMaiL or How to Get Rid of Legacy Code in Secure E-Mail Applications

Ewers¹,

Kubbilun²,

Liao

et al. 2005

Communications and Multimedia Security

View full text Add to dashboard Cite

E-mail is one of the oldest applications on the internet. Clients have to adhere to message formats that have been defined in RFC 822 [13] back in 1982, and at the same time be able to transport all types of content. Additionally, there are severe restrictions for the use of both encryption and digital signatures due to the adherence to RFC822. In this paper we propose a new approach based on our XMaiL project: Using the XMaiL parser, we transform header and body of the mail into an XML object. This transformation preserves both the MIME and the PKCS#7 structure of the mail. We describe the security enhancements that are possible using XMaiL such as selective encryption and signature of parts of the e-mail, or signature of critical fields in the header of the mail.

show abstract

Views, Reactions and Impact of Digitally-Signed Mail in e-Commerce

Cited by 10 publications

References 8 publications

Obstacles to the Adoption of Secure Communication Tools

Obstacles to the Adoption of Secure Communication Tools

Usable secure mailing lists with untrusted servers

Secure XMaiL or How to Get Rid of Legacy Code in Secure E-Mail Applications

Contact Info

Product

Resources

About