...
- Was very quick opening contacts and clicking the add contact button; found them easily
- Remarked we may want to show a picture of a QR code instead of just saying "QR code" for clarity
- Was quick to hit identity when sharing contact information
- Clicked on name to open chat
- Surprised that when adding Rob, GUI elements turned red
- "looks sketch" -- "does not look secure at all"
- Adding Rob to contacts was "so easy" compared to adding someone in person
Wiki Markup - Was happy to see the open there on delete all messages when removing contact
...
- A distinction between verified and unverified contacts was added. Contacts added by QR code are automatically marked as verified while others are not. This allowed users to add contacts with out fully trusting their identities.
- Unverified contacts/messages were marked in orange and verified in green.
- A button for inviting a user to a chat was added.
- The 'delete all messages' checkbox text was changed to "Also remove all records of communication with this user?" to indicate that it was an additional action.
...
- Change the color of the back of the screen to match the current "security" of the chat.
- Don't make messages from unverified contacts stand out so much (they were highlighted in orange).
- The user noted that she would probably mark all of her contacts as verified so that the application wouldn't bug her (which would defeat the purpose of verified v. unverified contacts).
- She suggested that the lock icons stay orange but that the background for messages from unverified users should be a neutral color.
- In contrast to a previous user, she wanted to keep the ability to add contacts easily (that is, not requiring that all contacts be added by QR code).
- She suggested that contacts should be verifiable by QR Code. If she has a contact and later meets the person face to face, she wanted to be able to verify the person by taking a picture of their QR code.
- Change the "Identity" section to "Me".
User 2
Observations During Trial
...
- "I have decided that I have no security interest at all."
- The user didn't feel the need to distinguish between verified and unverified users and didn't like the overhead.
- The user noted that the username above messages would appear more clickable if it looked like a link.
Overall Observations
- The method for wiping messages is not obvious. In reality, this may not be a problem as this task is extremely rare. However, one possible solution is to add a "Erase messages from user" option to each user's "User Actions" menu.
- The distinction between verified and unverified is confusing for some users. Making it less intrusive and adding help text may prevent some of this confusion.
- All of the users hesitated slightly when switching to the identity section when sharing their identity. Changing this to a "Me" section should help.