Fraunhofer-Gesellschaft

Publica

Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

A Usability Evaluation of Let's Encrypt and Certbot: Usable Security Done Right

 
: Tiefenau, C.; Zezschwitz, E. von; Häring, M.; Krombholz, K.; Smith, M.

:

Association for Computing Machinery -ACM-:
CCS 2019, 26th ACM SIGSAC Conference on Computer and Communications Security. Proceedings : London, United Kingdom, November 11 - 15, 2019
New York: ACM, 2019
ISBN: 978-1-4503-6747-9
S.1971-1988
Conference on Computer and Communications Security (CCS) <26, 2019, London>
Englisch
Konferenzbeitrag
Fraunhofer FKIE ()

Abstract
The correct configuration of HTTPS is a complex set of tasks, which many administrators have struggled with in the past. Let's Encrypt and Electronic Frontier Foundation's Certbot aim to improve the TLS ecosystem by offering free trusted certificates (Let's Encrypt) and by providing user-friendly support to configure and harden TLS (Certbot). Although adoption rates have increased, to date, there has been only a little scientific evidence of the actual usability and security benefits of this semi-automated approach. Therefore, we conducted a randomized control trial to evaluate the usability of Let's Encrypt and Certbot in comparison to the traditional certificate authority approach. We performed a within-subjects lab study with 31 participants. The study sheds light on the security and usability enhancements that Let's Encrypt and Certbot provide. We highlight how usability improvements aimed at administrators can have a large impact on security and discuss takeaways for Certbot and other security-related tasks that experts struggle with.

: http://publica.fraunhofer.de/dokumente/N-585503.html