Why Doesn’t Jane Protect Her Privacy?

Renaud, K., Volkamer, M. and Renkema-Padmos, A. (2014) Why Doesn’t Jane Protect Her Privacy? Lecture Notes in Computer Science, 8555, pp. 244-262. (doi:10.1007/978-3-319-08506-7_13)

116203.pdf - Accepted Version



End-to-end encryption has been heralded by privacy and security researchers as an effective defence against dragnet surveillance, but there is no evidence of widespread end-user uptake. We argue that the non-adoption of end-to-end encryption might not be entirely due to usability issues identified by Whitten and Tygar in their seminal paper “Why Johnny Can’t Encrypt”. Our investigation revealed a number of fundamental issues such as incomplete threat models, misaligned incentives, and a general absence of understanding of the email architecture. From our data and related research literature we found evidence of a number of potential explanations for the low uptake of end-to-end encryption. This suggests that merely increasing the availability and usability of encryption functionality in email clients will not automatically encourage increased deployment by email users. We shall have to focus, first, on building comprehensive end-user mental models related to email, and email security. We conclude by suggesting directions for future research.

Item Type:Articles
Additional Information:14th International Symposium, PETS 2014, Amsterdam, The Netherlands, 16-18 July 2014.
Glasgow Author(s) Enlighten ID:Renaud, Professor Karen
Authors: Renaud, K., Volkamer, M., and Renkema-Padmos, A.
College/School:College of Science and Engineering > School of Computing Science
Journal Name:Lecture Notes in Computer Science
Publisher:Springer International Publishing
Copyright Holders:Copyright © 2014 Springer International Publishing
First Published:First published in Lecture Notes in Computer Science 8555:244-262
Publisher Policy:Reproduced in accordance with the copyright policy of the publisher.

University Staff: Request a correction | Enlighten Editors: Update this record