USENIX Security2023Top-tier venue
Investigating Verification Behavior and Perceptions of Visual Digital Certificates
Dañiel Gerhardt, Alexander Ponticello, Adrian Dabrowski, Katharina Krombholz
Abstract
This paper presents a qualitative study to explore how individuals perceive and verify visual digital certificates with QR codes. During the COVID-19 pandemic, such certificates have been used in the EU to provide standardized proof of vaccination. We conducted semi-structured interviews with N = 17 participants responsible for verifying COVID-19 certificates as part of their job. Using a two-fold thematic analysis approach, we, among other things, identified and classified multiple behavioral patterns, including inadequate reliance on visual cues as a proxy for proper digital verification. We present design and structural recommendations based on our findings, including conceptual changes and improvements to storage and verification apps to limit shortcut opportunities. Our empirical findings are hence essential to improve the usability, robustness, and effectiveness of visual digital certificates and their verification.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Cited by top-tier papers1
Ask how each one uses itBuilds on2
- "If HTTPS Were Secure, I Wouldn't Need 2FA" - End User and Administrator Mental Models of HTTPSKatharina Krombholz, Karoline Busse, Katharina Pfeffer, Matthew Smith et al.S&P 2019 · 105 citations
- Public Views on Digital COVID-19 Certificates: a Mixed Methods User StudyLeysan Nurgalieva, Seamus Ryan, Andreas Balaskas, Janne Lindqvist et al.CHI 2022 · 11 citations
Related papers
- 52 Weeks Later: Attitudes Towards COVID-19 Apps for Different Purposes Over TimeMarvin Kowalewski, Christine Utz, Martin Degeling, Theodor Schnitzler et al.CSCW 2023 · 5 citations
- Scanned and Scammed: Insecurity by ObsQRity? Measuring User Susceptibility and Awareness of QR Code-Based AttacksMarvin Kowalewski, Leona Lassak, Markus Dürmuth, Theodor SchnitzlerUSENIX Security 2025
- The Web's Identity Crisis: Understanding the Effectiveness of Website Identity IndicatorsChristopher Thompson, Martin Shelton, Emily Stark, Max Walker et al.USENIX Security 2019 · 48 citations
- How to Bind Anonymous Credentials to HumansJulia Hesse, Nitin Singh, Alessandro SorniottiUSENIX Security 2023
- Development, Evaluation, and Implementation of SEQR - a Usable Secure QR Code ScannerMattia Mossano, Maxime Fabian Veit, Tobias Länge, Benjamin Maximilian Berens et al.CHI 2026 · 1 citation
