User-Unfriendly Security

In today's heightened awareness of online risks and vulnerabilities, software engineers are increasingly shifting burden to the users, bombarding them with confirmation dialogs that overwhelms users with unwanted details and desensitizing them into pressing the OK button without reading the dialog message.

Number, complexity, and ambiguity of regional regularity obligations also encourage this trend.  Add to this, increasing demand for user control over all matters by privacy proponents.  Take for example, P3P initiative that, although well intended and widely implemented, provides no tangible benefits no comprehension to average users.  Result is secure software that is difficult and bewildering to use, manage, and support.

Typical engineering solution to this problem is to add "Do not show" checkbox on the dialog.  Unfortunately, most users I have met are either ignorant of the "Do not show" checkbox or abuse it, turning off every confirmation dialogs they run into.  So this solution is not only useless, but also make software difficult and tedious to use.  There are other solutions that can do better.  I'll describe one in another post.