Why doesn't Jane protect her privacy?

Karen Renaud, Melanie Volkamer, Arne Renkema-Padmos, Emiliano De Cristofaro (Editor), Steven J. Murdoch (Editor)

Research output: Chapter in Book/Report/Conference proceedingChapter (peer-reviewed)peer-review

44 Citations (Scopus)
1 Downloads (Pure)

Abstract

End-to-end encryption has been heralded by privacy and security researchers as an effective defence against dragnet surveillance, but there is no evidence of widespread end-user uptake. We argue that the non-adoption of end-to-end encryption might not be entirely due to usability issues identified by Whitten and Tygar in their seminal paper "Why Johnny Can't Encrypt". Our investigation revealed a number of fundamental issues such as incomplete threat models, misaligned incentives, and a general absence of understanding of the email architecture. From our data and related research literature we found evidence of a number of potential explanations for the low uptake of end-to-end encryption. This suggests that merely increasing the availability and usability of encryption functionality in email clients will not automatically encourage increased deployment by email users. We shall have to focus, first, on building comprehensive end-user mental models related to email, and email security. We conclude by suggesting directions for future research.
Original languageEnglish
Title of host publicationInternational Symposium on Privacy Enhancing Technologies Symposium
Subtitle of host publicationPETS 2014: Privacy Enhancing Technologies
Place of PublicationCham
PublisherSpringer
Pages244-262
Number of pages19
Volume8555
ISBN (Print)9783319085050
DOIs
Publication statusPublished - 20 Jun 2014
Event14th International Symposium on Privacy Enhancing Technologies - PETS 2014 - Amsterdam, Netherlands
Duration: 16 Jul 201418 Jul 2014

Publication series

NameLecture Notes in Computer Science
PublisherSpringer
Volume8555

Conference

Conference14th International Symposium on Privacy Enhancing Technologies - PETS 2014
Abbreviated titlePETS 2104
Country/TerritoryNetherlands
CityAmsterdam
Period16/07/1418/07/14

Keywords

  • end-to-end encryption
  • privacy
  • security
  • end-user mental models

Fingerprint

Dive into the research topics of 'Why doesn't Jane protect her privacy?'. Together they form a unique fingerprint.

Cite this