Why Johnny Still, Still Can't Encrypt: Evaluating the Usability of a Modern PGP Client

TL;DR

This study evaluates the usability of Mailvelope, a modern PGP client, revealing that despite technological advances, PGP remains difficult for average users to adopt effectively.

Contribution

The paper provides empirical evidence on the persistent usability issues of modern PGP tools through a laboratory user study with Mailvelope.

Findings

PGP remains largely unusable for the general public

Users encounter significant pain points when using Mailvelope

Future PGP systems need improved usability features

Abstract

This paper presents the results of a laboratory study involving Mailvelope, a modern PGP client that integrates tightly with existing webmail providers. In our study, we brought in pairs of participants and had them attempt to use Mailvelope to communicate with each other. Our results shown that more than a decade and a half after \textit{Why Johnny Can't Encrypt}, modern PGP tools are still unusable for the masses. We finish with a discussion of pain points encountered using Mailvelope, and discuss what might be done to address them in future PGP systems.