Security Protocols XXVII: 27th International Workshop, Cambridge, UK, April 10–12, 2019, Revised Selected Papers (Lecture Notes in Computer Science Book 12287)

The volume LNCS 12287 constitutes the proceedings of the 27th International Workshop on Security Protocols, held in Cambridge, UK, in April 2019. The volume consists of 16 thoroughly revised invited papers presented together with the respective transcripts of discussions. The theme of this year's workshop was “Security Protocols for Humans" The topics covered included Designing for Humans and Understanding Humans, Human Limitations in Security, Secure sharing and collaboration and much more. Front Matter ....Pages i-ix Front Matter ....Pages 1-1 Transparency Enhancing Technologies to Make Security Protocols Work for Humans (Alexander Hicks, Steven J. Murdoch)....Pages 3-10 Transparency Enhancing Technologies to Make Security Protocols Work for Humans (Transcript of Discussion) (Steven J. Murdoch)....Pages 11-19 Audio CAPTCHA with a Few Cocktails: It’s so Noisy I Can’t Hear You (Benjamin Maximilian Reinheimer, Fairooz Islam, Ilia Shumailov)....Pages 20-40 Audio CAPTCHA with a Few Cocktails: It’s So Noisy I Can’t Hear You (Transcript of Discussion) (Benjamin Maximilian Reinheimer, Fairooz Islam, Ilia Shumailov)....Pages 41-47 Front Matter ....Pages 49-49 Shaping Our Mental Model of Security (Saša Radomirović)....Pages 51-59 Shaping Our Mental Model of Security (Transcript of Discussion) (Saša Radomirović)....Pages 60-68 Social Constructionism in Security Protocols (Simon N. Foley, Vivien M. Rooney)....Pages 69-81 Social Constructionism in Security Protocols (Transcript of Discussion) (Simon N. Foley, Vivien M. Rooney)....Pages 82-88 Front Matter ....Pages 89-89 Bounded Temporal Fairness for FIFO Financial Markets (Vasilios Mavroudis)....Pages 91-103 Bounded Temporal Fairness for FIFO Financial Markets (Transcript of Discussion) (Vasilios Mavroudis)....Pages 104-112 Mismorphism: The Heart of the Weird Machine (Prashant Anantharaman, Vijay Kothari, J. Peter Brady, Ira Ray Jenkins, Sameed Ali, Michael C. Millian et al.)....Pages 113-124 Mismorphism: The Heart of the Weird Machine (Transcript of Discussion) (Prashant Anantharaman)....Pages 125-131 Front Matter ....Pages 133-133 Affordable Security or Big Guy vs Small Guy (Daniele Friolo, Fabio Massacci, Chan Nam Ngo, Daniele Venturi)....Pages 135-147 Affordable Security or Big Guy vs Small Guy (Transcript of Discussion) (Chan Nam Ngo)....Pages 148-156 Human-Computability Boundaries (Vijay Kothari, Prashant Anantharaman, Ira Ray Jenkins, Michael C. Millian, J. Peter Brady, Sameed Ali et al.)....Pages 157-166 Human-Computability Boundaries (Transcript of Discussion) (Vijay Kothari, Michael C. Millian)....Pages 167-174 Front Matter ....Pages 175-175 Challenges in Designing a Distributed Cryptographic File System (Arastoo Bozorgi, Mahya Soleimani Jadidi, Jonathan Anderson)....Pages 177-192 Challenges in Designing a Distributed Cryptographic File System (Transcript of Discussion) (Arastoo Bozorgi, Mahya Soleimani Jadidi, Jonathan Anderson)....Pages 193-199 Front Matter ....Pages 201-201 Zero-Knowledge User Authentication: An Old Idea Whose Time Has Come (Laurent Chuat, Sarah Plocher, Adrian Perrig)....Pages 203-212 Zero-Knowledge User Authentication: An Old Idea Whose Time Has Come (Transcript of Discussion) (Laurent Chuat)....Pages 213-222 A Rest Stop on the Unending Road to Provable Security (Virgil D. Gligor)....Pages 223-232 A Rest Stop on the Unending Road to Provable Security (Transcript of Discussion) (Virgil D. Gligor)....Pages 233-241 Front Matter ....Pages 243-243 Ghost Trace on the Wire? Using Key Evidence for Informed Decisions (Diana A. Vasile, Martin Kleppmann, Daniel R. Thomas, Alastair R. Beresford)....Pages 245-257 Ghost Trace on the Wire? Using Key Evidence for Informed Decisions (Transcript of Discussion) (Diana A. Vasile)....Pages 258-263 Front Matter ....Pages 265-265 Evolution of SSL/TLS Indicators and Warnings in Web Browsers (Lydia Kraus, Martin Ukrop, Vashek Matyas, Tobias Fiebig)....Pages 267-280 Evolution of SSL/TLS Indicators and Warnings in Web Browsers (Transcript of Discussion) (Lydia Kraus)....Pages 281-288 Snitches Get Stitches: On the Difficulty of Whistleblowing (Mansoor Ahmed-Rengers, Ross Anderson, Darija Halatova, Ilia Shumailov)....Pages 289-303 Snitches Get Stitches: On the Difficulty of Whistleblowing (Transcript of Discussion) (Mansoor Ahmed-Rengers, Ross Anderson, Darija Halatova, Ilia Shumailov)....Pages 304-312 Back Matter ....Pages 313-313 This volume contains the revised proceedings of the 27th International Workshop on Security Protocols, held at Trinity College, Cambridge, UK, during April 10-12, 2019. The theme of this year's workshop was "security protocols for humans." Getting protocol details right is critical in the presence of a malicious adversary, but so is understanding the context in which a protocol is deployed: protocols are components of larger systems that human beings put their trust in. How can we design protocols to expose meaningful information about state and functionality to their users? What are the consequences when we don't? How can we bridge the gap between technical definitions of protocol correctness and users' security expectations? As with previous workshops in this series, participation in the 2019 workshop was by invitation only, following submission of a position paper. The format of the workshop is intended to encourage vibrant discussions; the papers in this volume have been revised by their authors to incorporate ideas that emerged from this discussion. The discussion itself is also represented in this volume by a curated transcript that accompanies each paper