Improved user authentication in off-the-record messaging
Improved user authentication in off-the-record messaging
复制标题
改进了非记录消息传递中的用户身份验证
DOI：
10.1145/1314333.1314340
复制
发表时间：
2007
影响因子：
2.2
通讯作者：
I. Goldberg
中科院分区：
文献类型：
--
作者：
Chris Alexander;I. Goldberg
即时通讯软件现在被各种各样的人用于家庭和企业。这些用户中的许多人将受益于额外的隐私，但没有足够的专业知识来使用现有的隐私增强软件。隐私软件需要易于理解，对用户隐藏复杂的加密概念。我们着眼于提高非正式消息的可用性，这是一个流行的即时通讯软件隐私插件。通过使用社会主义百万富翁问题的解决方案，我们能够提供与旧版本的OTR相同级别的隐私和身份验证，但我们不再要求用户理解任何困难的概念，如密钥或指纹。
Instant Messaging software is now used in homes and businesses by a wide variety of people. Many of these users would benefit from additional privacy, but do not have enough specialized knowledge to use existing privacy-enhancing software. There is a need for privacy software to be easy to understand, with complicated cryptographic concepts hidden from the user. We look at improving the usability of Off-the-Record Messaging, a popular privacy plugin for instant messaging software. By using a solution to the Socialist Millionaires' Problem, we are able to provide the same level of privacy and authentication as in older versions of OTR, but we no longer require that the user understand any difficult concepts such as keys or fingerprints.