Understanding student experiences with TLS client authentication

This thesis presents a comprehensive investigation into student experiences with TLS client authentication, highlighting the usability challenges and learning curves associated with this long term key managament system. We designed a study that required future innovators in technology and security to use modern-day implementations of this certificate-based authentication system. From this study, we analyzed server logs, project reports, and survey responses from students enrolled in the applied cryptography course. We revealed significant hurdles in the initial setup and long-term key management of credentials used in TLS client authentication, emphasizing the gap between theoretical knowledge and practical implementation skills. Through quantitative results, the study quantified the time investment and error rates students face, and provided a System Usability Scale (SUS) assessment that points to the need for improved features and better resources. Qualitatively, this thesis identifies common pain points, resource utilization, and tool effectiveness from the students' perspectives. It further discusses the implications of these findings for design and delivery, suggesting pathways forward to enhance the practical usability and understanding of key management systems.

This work is based upon research supported by the National Science Foundation under award CNS-2238001.