[47394] in cryptography@c2.net mail archive
Interesting paper on PKI and TRUSTe
daemon@ATHENA.MIT.EDU (Aram Perez)
Thu Sep 28 09:31:08 2006
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
To: Cryptography <cryptography@metzdowd.com>
From: Aram Perez <aramperez@mac.com>
Date: Wed, 27 Sep 2006 06:15:42 -0700
Abstract
Widely-used online "trust" authorities issue certifications without
substantial verification of the actual trustworthiness of recipients.
Their lax approach gives rise to adverse selection: The sites that
seek and obtain trust certifications are actually significantly less
trustworthy than those that forego certification. I demonstrate this
adverse selection empirically via a new dataset on web site
characteristics and safety. I find that TRUSTe-certified sites are
more than twice as likely to be untrustworthy as uncertified sites, a
difference which remains statistically and economically significant
when restricted to "complex" commercial sites. I also present
analogous results of adverse selection in search engine advertising -
finding ads at leading search engines to be more than twice as likely
to be untrustworthy as corresponding organic search results for the
same search terms.
See http://www.benedelman.org/publications/advsel-trust-draft.pdf
Enjoy,
Aram Perez
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
