Abstract by Daniel Metro
Toward Usable Secure Messaging
The effective security provided by secure messaging applications depends heavily on users completing an authentication ceremony—a sequence of manual operations enabling users to verify they are indeed communicating with one another. Unfortunately, evidence to date suggests that users don't and can't do this. In a prior study, we showed that even with prompting, it takes users over 3 minutes to find the ceremony and over 7.5 minutes to complete it. In this presentation, we will explain how our lab modified the Signal messaging app to make the authentication ceremony easier to find instantly and complete in less than 3 minutes.