How to make secure email easier to use

Cryptographically protected email has a justly deserved reputation of being difficult to use. Based on an analysis of the PEM, PGP and S/MIME standards and a survey of 470 merchants who sell products on Amazon.com, we argue that the vast majority of Internet users can start enjoying digitally signed email today. We present suggestions for the use of digitally signed mail in e-commerce and simple modifications to webmail systems that would significantly increase integrity, privacy and authorship guarantees that those systems make. We then show how to use the S/MIME standard to extend such protections Internet-wide. Finally, we argue that software vendors must make minor charges to the way that mail clients store email before unsophisticated users can safely handle mail that is sealed with encryption. Author Keywords User Studies, E-Commerce, User Interaction Design ACM Classification Keywords D.4.6.c Security and Privacy Protection ? Cryptographic Controls; K.4.4.f Computers and Societ...

• Type: Conference
• Year: 2005
• Where: CHI
• Authors: Simson L. Garfinkel, David Margrave, Jeffrey I. Schiller, Erik Nordlander, Robert C. Miller
• Keywords: ACM Classification Keywords, CHI 2005, HCI User Interfaces, Human Computer Interaction, Keywords User Studies