A WEEK TO REMEMBER THE IMPACT OF BROWSER WARNING STORAGE POLICIES - - PowerPoint PPT Presentation

▶
a week to remember
SMART_READER_LITE
LIVE PREVIEW

A WEEK TO REMEMBER THE IMPACT OF BROWSER WARNING STORAGE POLICIES - - PowerPoint PPT Presentation

Jun 02, 2023 243 likes •652 views

A WEEK TO REMEMBER THE IMPACT OF BROWSER WARNING STORAGE POLICIES JOEL WEINBERGER & ADRIENNE PORTER FELT When someone clicks through an HTTPS warning, how long should the browser store that decision for? WHY DO WE CARE? REAL FALSE

slide-1
SLIDE 1

A WEEK TO REMEMBER

THE IMPACT OF BROWSER WARNING STORAGE POLICIES

JOEL WEINBERGER & ADRIENNE PORTER FELT

slide-2
SLIDE 2
slide-3
SLIDE 3

When someone clicks through an HTTPS warning, how long should the browser store that decision for?

slide-4
SLIDE 4
slide-5
SLIDE 5

WHY DO WE CARE?

slide-6
SLIDE 6

REAL ATTACK:

forget the decision as soon as possible

FALSE ALARM:

save the decision as long as possible

slide-7
SLIDE 7

REAL ATTACK:

forget the decision as soon as possible

FALSE ALARM:

save the decision as long as possible

slide-8
SLIDE 8

REAL ATTACK:

forget the decision as soon as possible

FALSE ALARM:

save the decision as long as possible

slide-9
SLIDE 9

WHICH STORAGE POLICY SHOULD CHROME USE?

slide-10
SLIDE 10

NO CLEAR CONSENSUS

Chrome 44 Windows Browser session Safari 9 Mac Browser session UC Browser 10 Android Browser session Edge 20 Windows Browser session Firefox 44 Windows Permanent (or session) Safari 9 iOS Permanent UC Browser 2 iOS Permanent UC Mini 10 Android Never

slide-11
SLIDE 11

a good policy should reduce the cost

  • f a mistake & number of false alarms
slide-12
SLIDE 12

a good policy should reduce the cost

  • f a mistake & number of false alarms
slide-13
SLIDE 13

a good policy should reduce the cost

  • f a mistake & number of false alarms
slide-14
SLIDE 14

HOW DO PEOPLE REACT TO DIFFERENT STORAGE POLICIES?

slide-15
SLIDE 15

6 EXPERIMENTAL GROUPS

slide-16
SLIDE 16

ADHERENCE RATE Rate at which people heed the warning’s advice

slide-17
SLIDE 17

EFFECT ON ADHERENCE

slide-18
SLIDE 18

REGRET RATE Rate at which people change their minds about a warning

slide-19
SLIDE 19

EFFECT ON REGRET

slide-20
SLIDE 20

CORRELATED RATES

slide-21
SLIDE 21

CHOOSING A RATE

Session 1 Day 3 days 1 week 1 month 3 months Adherence 56.35% 63.96% 66.82% 69.88% 74.38% 75.28% Regret 15.98% 15.67% 17.35% 20.59% 25.56% 25.86% Δ Regret

  • 0.31

1.37 4.61 9.58 9.88

slide-22
SLIDE 22

CHOOSING A RATE

Session 1 Day 3 days 1 week 1 month 3 months Adherence 56.35% 63.96% 66.82% 69.88% 74.38% 75.28% Regret 15.98% 15.67% 17.35% 20.59% 25.56% 25.86% Δ Regret

  • 0.31

1.37 4.61 9.58 9.88

slide-23
SLIDE 23

the one-week policy is working well in practice

slide-24
SLIDE 24

1. User asks to forget 2. User clears browsing history 3. Client sees a valid chain ALSO CLEAR DECISION IF:

slide-25
SLIDE 25

4 LESSONS LEARNED

slide-26
SLIDE 26
  • 1. Storage policies have a

large effect on adherence

slide-27
SLIDE 27

EFFECT IN CONTEXT

slide-28
SLIDE 28

EFFECT IN CONTEXT

slide-29
SLIDE 29

EFFECT IN CONTEXT

slide-30
SLIDE 30

EFFECT IN CONTEXT

slide-31
SLIDE 31
  • 2. Storage policies account for

difference between Chrome & Firefox

slide-32
SLIDE 32

CHROME & FIREFOX

slide-33
SLIDE 33

CHROME & FIREFOX

slide-34
SLIDE 34

CHROME & FIREFOX

slide-35
SLIDE 35

CHROME & FIREFOX

slide-36
SLIDE 36

CHROME & FIREFOX

slide-37
SLIDE 37
  • 3. Storage policies are confusing
slide-38
SLIDE 38
  • 4. Researchers & browsers

should study storage policies

slide-39
SLIDE 39

A WEEK TO REMEMBER

THE IMPACT OF BROWSER WARNING STORAGE POLICIES

JOEL WEINBERGER & ADRIENNE PORTER FELT