Re:Making PGP Key Management Invisible So Johnny Can Encrypt
by Kalium on Friday February 06, 2015 @03:58PM
(#9011507)
They're looking at key security features that mitigate attacks and saying "That's a corner case, ignore it".
From a UX perspective, that's great. It lets you simplify and remove a lot of complexity. The catch is that every attack scenario is a corner case. As a result, users get exposed to many of the same vulnerabilities that the technology is supposed to be enabling them to guard against.
There's nothing novel - or, I submit, interesting - about the idea of trading off security to make things slicker for the user.
From a UX perspective, that's great. It lets you simplify and remove a lot of complexity. The catch is that every attack scenario is a corner case. As a result, users get exposed to many of the same vulnerabilities that the technology is supposed to be enabling them to guard against.
There's nothing novel - or, I submit, interesting - about the idea of trading off security to make things slicker for the user.