{"id":"https://openalex.org/W3208153782","doi":"https://doi.org/10.1109/sp46214.2022.9833755","title":"27 Years and 81 Million Opportunities Later: Investigating the Use of Email Encryption for an Entire University","display_name":"27 Years and 81 Million Opportunities Later: Investigating the Use of Email Encryption for an Entire University","publication_year":2022,"publication_date":"2022-05-01","ids":{"openalex":"https://openalex.org/W3208153782","doi":"https://doi.org/10.1109/sp46214.2022.9833755","mag":"3208153782"},"language":"en","primary_location":{"id":"doi:10.1109/sp46214.2022.9833755","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833755","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045617887","display_name":"Christian Stransky","orcid":"https://orcid.org/0000-0002-7942-5372"},"institutions":[{"id":"https://openalex.org/I114112103","display_name":"Leibniz University Hannover","ror":"https://ror.org/0304hq317","country_code":"DE","type":"education","lineage":["https://openalex.org/I114112103"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christian Stransky","raw_affiliation_strings":["Leibniz University,Hannover","Leibniz University, Hannover"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Leibniz University,Hannover","institution_ids":["https://openalex.org/I114112103"]},{"raw_affiliation_string":"Leibniz University, Hannover","institution_ids":["https://openalex.org/I114112103"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002968005","display_name":"Oliver Wiese","orcid":null},"institutions":[{"id":"https://openalex.org/I75951250","display_name":"Freie Universit\u00e4t Berlin","ror":"https://ror.org/046ak2485","country_code":"DE","type":"education","lineage":["https://openalex.org/I75951250"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Oliver Wiese","raw_affiliation_strings":["Freie Universität,Berlin"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Freie Universität,Berlin","institution_ids":["https://openalex.org/I75951250"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052211172","display_name":"Volker R\u00f6th","orcid":"https://orcid.org/0000-0003-0991-0273"},"institutions":[{"id":"https://openalex.org/I75951250","display_name":"Freie Universit\u00e4t Berlin","ror":"https://ror.org/046ak2485","country_code":"DE","type":"education","lineage":["https://openalex.org/I75951250"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Volker Roth","raw_affiliation_strings":["Freie Universität,Berlin"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Freie Universität,Berlin","institution_ids":["https://openalex.org/I75951250"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074668699","display_name":"Yasemin Acar","orcid":"https://orcid.org/0000-0001-7167-7383"},"institutions":[{"id":"https://openalex.org/I4210096592","display_name":"Max Planck Institute for Security and Privacy","ror":"https://ror.org/00bj0r217","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210096592"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Yasemin Acar","raw_affiliation_strings":["Max Planck Institute for Security and Privacy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Max Planck Institute for Security and Privacy","institution_ids":["https://openalex.org/I4210096592"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087356408","display_name":"Sascha Fahl","orcid":"https://orcid.org/0000-0002-5644-3316"},"institutions":[{"id":"https://openalex.org/I114112103","display_name":"Leibniz University Hannover","ror":"https://ror.org/0304hq317","country_code":"DE","type":"education","lineage":["https://openalex.org/I114112103"]},{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sascha Fahl","raw_affiliation_strings":["Leibniz University,Hannover","CISPA Helmholtz-Center for Information Security","Leibniz University, Hannover"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Leibniz University,Hannover","institution_ids":["https://openalex.org/I114112103"]},{"raw_affiliation_string":"CISPA Helmholtz-Center for Information Security","institution_ids":["https://openalex.org/I4210128801"]},{"raw_affiliation_string":"Leibniz University, Hannover","institution_ids":["https://openalex.org/I114112103"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":9.9515,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":{"value":0.98279159,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"860","last_page":"875"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12607","display_name":"Personal Information Management and User Behavior","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T12607","display_name":"Personal Information Management and User Behavior","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.8912867307662964},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.6398395299911499},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5924383997917175},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5474784970283508},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5434515476226807},{"id":"https://openalex.org/keywords/email-authentication","display_name":"Email authentication","score":0.5006487369537354},{"id":"https://openalex.org/keywords/user-interface","display_name":"User interface","score":0.4224620461463928},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3994869589805603},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3337000012397766},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.11486431956291199},{"id":"https://openalex.org/keywords/multi-factor-authentication","display_name":"Multi-factor authentication","score":0.06900259852409363}],"concepts":[{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.8912867307662964},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.6398395299911499},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5924383997917175},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5474784970283508},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5434515476226807},{"id":"https://openalex.org/C550791530","wikidata":"https://www.wikidata.org/wiki/Q5368811","display_name":"Email authentication","level":5,"score":0.5006487369537354},{"id":"https://openalex.org/C89505385","wikidata":"https://www.wikidata.org/wiki/Q47146","display_name":"User interface","level":2,"score":0.4224620461463928},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3994869589805603},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3337000012397766},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.11486431956291199},{"id":"https://openalex.org/C194699767","wikidata":"https://www.wikidata.org/wiki/Q7878662","display_name":"Multi-factor authentication","level":4,"score":0.06900259852409363},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46214.2022.9833755","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833755","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W113132652","https://openalex.org/W125192817","https://openalex.org/W1652324086","https://openalex.org/W1661930700","https://openalex.org/W1975307600","https://openalex.org/W1996430944","https://openalex.org/W2003617748","https://openalex.org/W2005330022","https://openalex.org/W2021327598","https://openalex.org/W2085668922","https://openalex.org/W2086099868","https://openalex.org/W2137891816","https://openalex.org/W2167976277","https://openalex.org/W2178173146","https://openalex.org/W2339750270","https://openalex.org/W2412850938","https://openalex.org/W2615924707","https://openalex.org/W2722360008","https://openalex.org/W2726282394","https://openalex.org/W2752073028","https://openalex.org/W2777535578","https://openalex.org/W2783830422","https://openalex.org/W2889199884","https://openalex.org/W2889514113","https://openalex.org/W2896287844","https://openalex.org/W2906926620","https://openalex.org/W2982321410","https://openalex.org/W2987031481","https://openalex.org/W3171741903","https://openalex.org/W3178006137","https://openalex.org/W4297192561","https://openalex.org/W6605156122","https://openalex.org/W6685576229","https://openalex.org/W6715480035","https://openalex.org/W6743880665","https://openalex.org/W6750586099","https://openalex.org/W6754004925","https://openalex.org/W6758076146","https://openalex.org/W6797391812","https://openalex.org/W6797459262"],"related_works":["https://openalex.org/W2429057255","https://openalex.org/W2187546663","https://openalex.org/W148745890","https://openalex.org/W4389670110","https://openalex.org/W2611942503","https://openalex.org/W4315621326","https://openalex.org/W2899790217","https://openalex.org/W2598865957","https://openalex.org/W1576092969","https://openalex.org/W2524154428"],"abstract_inverted_index":{"Email":[0],"is":[1,55,63,112,243],"one":[2],"of":[3,100,125,132,156,167,196,220,240],"the":[4,14,97,115,123,154,238],"main":[5],"communication":[6],"tools":[7,41],"and":[8,26,89,145,158,180,216,247],"has":[9,68],"seen":[10,70],"significant":[11],"adoption":[12,72,239],"in":[13,21,52,114,160],"past":[15],"decades.":[16],"However,":[17],"emails":[18,35,215,222],"are":[19],"sent":[20],"plain":[22],"text":[23],"by":[24,36,193],"default":[25],"allow":[27],"attackers":[28],"easy":[29],"access.":[30],"Users":[31,184],"can":[32],"protect":[33],"their":[34],"end-to-end":[37],"encrypting":[38,214],"them":[39],"using":[40,201],"such":[42,85],"as":[43,86,211,213],"S/MIME":[44,157,172,190,224,260],"or":[45,173,261],"PGP.Although":[46],"PGP":[47,159,192,262],"had":[48,205,227],"already":[49],"been":[50],"introduced":[51],"1991,":[53],"it":[54],"a":[56,64,138,194,206],"commonly":[57],"held":[58],"belief":[59],"that":[60,67,164,200,217,237,248],"email":[61,83,101,126,203,241],"encryption":[62,84,127,242],"niche":[65],"tool":[66],"not":[69],"widespread":[71],"to":[73,96,143,152,177,188],"date.":[74],"Previous":[75],"user":[76,90],"studies":[77],"identified":[78],"ample":[79],"usability":[80],"issues":[81],"with":[82],"key":[87,249],"management":[88,250],"interface":[91],"challenges,":[92],"which":[93],"likely":[94,187],"contribute":[95],"limited":[98],"success":[99],"encryption.However,":[102],"so":[103],"far":[104],"ground":[105],"truth":[106],"based":[107,128],"on":[108,129,209,233],"longitudinal":[109],"field":[110],"data":[111,133,146],"missing":[113],"literature.":[116],"Towards":[117],"filling":[118],"this":[119],"gap,":[120],"we":[121,149],"measure":[122],"use":[124,155,189],"27":[130],"years":[131],"for":[134],"37,089":[135],"users":[136,169,225,255],"at":[137],"large":[139],"university.":[140],"While":[141],"attending":[142],"ethical":[144],"privacy":[147],"concerns,":[148],"were":[150,185,231],"able":[151],"analyze":[153],"81,612,595":[161],"emails.We":[162],"found":[163],"only":[165,218],"5.46%":[166],"all":[168,221],"ever":[170],"used":[171],"PGP.":[174],"This":[175],"led":[176],"0.06%":[178],"encrypted":[179,232],"2.8%":[181],"signed":[182],"emails.":[183],"more":[186],"than":[191],"factor":[195],"six.":[197],"We":[198],"saw":[199],"multiple":[202],"clients":[204],"negative":[207],"impact":[208,253],"signing":[210],"well":[212],"3.36%":[219],"between":[223],"who":[226,256],"previously":[228],"exchanged":[229],"certificates":[230],"average.Our":[234],"results":[235],"imply":[236],"indeed":[244],"very":[245],"low":[246],"challenges":[251],"negatively":[252],"even":[254],"have":[257],"set":[258],"up":[259],"previously.":[263]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}