A user study of off-the-record messaging

SOUPS 2008 - Proceedings of the 4th Symposium on Usable Privacy and Security

Volumn , Issue , 2008, Pages 95-106

  Stedman, Ryan ^a   Yoshida, Kayo ^a   Goldberg, Ian ^a  

^a UNIVERSITY OF WATERLOO   (Canada)

Author keywords

Instant messaging; OTR; Think aloud; Usable security

Indexed keywords

COMPUTER SECURITIES; DESIGN GOALS; EXISTING SYSTEMS; FACE-TO-FACE CONVERSATIONS; INSTANT MESSAGING; INSTANT MESSAGING SERVICES; OTR; PLUG-IN; THINK ALOUD; USABLE SECURITY; USER STUDIES;

INTERNET PROTOCOLS; MESSAGE PASSING; WORLD WIDE WEB;

OXYGEN PERMEABLE MEMBRANES;

EID: 65449188732     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1408664.1408678     Document Type: Conference Paper

References (20)

1. C. Alexander and I. Goldberg. Improved User Authentication in Off-the-Record Messaging. Proceedings of the 2007 ACM workshop on Privacy in electronic society, pages 41-47, 2007.
2. Apple, Inc. Apple - Mac OS X Leopard - Features - iChat. http://www.apple.com/macosx/features/ichat.html. Accessed February 2008.
3. N. Borisov, I. Goldberg, and E. Brewer. Off-the-record communication, or, why not to use PGP. Proceedings of the 2004 ACM workshop on Privacy in the electronic society, pages 77-84, 2004.
4. W. Diffie and M. Hellman. New directions in cryptography. IEEE Transactions on Information Theory, 22(6):644-654, 1976.
5. S. Egan and others. Pidgin. http://www.pidgin.im/. Accessed February 2008.
6. W. Gaver. Technology affordances. Proceedings of the SIGGHI conference on Human factors in computing systems: Reaching through technology, pages 79-84, 1991.
7. O. Goffart. mod-otr - Man in the Middle module for Off-The-Record. http://ejabberd. jabber.ru/mod-otr. Accessed February 2008.
8. I. Goldberg. Privacy Enhancing Technologies for the Internet III: Ten Years Later. In A. Acquisti, S. Gritzalis, C. Lambrinoudakis, and S. D. C. di Vimercati, editors, Digital Privacy: Theory, Technologies, and Practices, chapter 1. Auerbach, 2007.
9. I. Goldberg, C. Alexander, and N. Borisov. Off-the-Record Messaging: Authentication. OTR Help Page. http://www.cypherpunks.ca/ otr/help/authenticate. php?lang=en. Accessed February 2008.
10. I. Goldberg, C. Alexander, and N. Borisov. Off-the-Record Messaging: Fingerprints. OTR Help Page. http://www.cypherpunks.ca/ otr/help/fingerprints. php?lang=en. Accessed February 2008.
11. I. Goldberg, C. Alexander, and N. Borisov. Off-the-Record Messaging: Privacy Levels. OTR Help Page. http://www.cypherpunks.ca/ otr/help/unverified. php?lang=en. Accessed February 2008.
12. Interac, Inc. Interac Email Money Transfer. http://www.interac.ca/ consumers/productsandservices-ol-emt.php. Accessed February 2008.
13. H. Krawczyk. SIGMA: The 'SIGn-and-MAc' Approach to Authenticated Diffie-Hellman and Its Use in the IKE Protocols. In Advances in Cryptology-CRYPTO 2003, Santa Barbara, California, USA, August 2003.
14. R. Kuhlmann. CLI-based Multi-Messenger. http://www.climm.org/. Accessed February 2008.
15. K. Kurtz and S. Werndorfer. Trillian. http://www.ceruleanstudios.com/. Accessed February 2008.
16. C. Lewis and J. Rieman. Task-centered, User Interface Design: A Practical Introduction. University of Colorado, Boulder, Dept. of Computer Science, 1993.
17. D. M.-V. Prett and others. Kopete Instant Messenger. http://kopete.kde. org/. Accessed February 2008.
18. P. Riikonen and others. Secure Internet Live Conferencing. http://silcnet.org/. Accessed May 2008.
19. E. Schoenberg and others. Adium. http://www.adiumx.com/. Accessed February 2008.
20. B. Tompkins. Pidgin-Encryption. http://pidgin-encrypt.sourceforge.net/. Accessed February 2008.