Team and Contributors

PrivacyScore is the result of the work of many contributors.

University of Bamberg, Germany

Prof. Dr. Dominik Herrmann heads the Privacy and Security in Information Systems Group. Henning Pridöhl and Martin Müller are a research assistants in that group.

At the moment, the machines that are being used for scanning are hosted here.

TU Darmstadt, Germany

Max Maass contributes to PrivacyScore in various ways. He works in the Secure Mobile Networking Lab at TU Darmstadt, as a PhD student in the Doctoral College “Privacy and Trust for Mobile Users”.

Universität Hamburg, Germany

Multiple researchers and students of the Security in Distributed Systems Group at Universität Hamburg have been working on the web design and the implementation of PrivacyScore.

• Matthias Marx (research assistant)
• Tobias Müller (research assistant)
• Pascal Wichmann (student assistant)
• Rick Trojahn (student)
• Kim-Otto Daetz (student)

Acknowledgements

We are grateful to the authors of the following tools, which have been used to implement PrivacyScore or have inspired our work.

• OpenWPM by Steven Englehardt and Arvind Narayanan (Center for Information Technology Policy, Princeton University), which was used for most of the checks in the NoTrack group. In September 2018 we switched from OpenWPM to Chrome (via the DevTools protocol).
• testssl.sh by Dirk Wetter, which is used to perform most of the checks in the EncWeb and EncMail groups.
• WebbKoll developed by dataskydd.net, which inspired us to start PrivacyScore.
• securityheaders.io maintained by Scott Helme, which analyzes issues with HTTP security headers in much more detail than PrivacyScore.
• urlscan.io maintained by Johannes Gilger, a sophisticated tool for the analysis of web site retrievals.
• Mozilla Observatory, which also reports on various issues with HTTP security headers.
• https.jetzt, a site that provides scan results about the HTTPS deployment of websites of German public authorities.

We are also grateful to the participants of PET-CON 2017.1 and to members of digitalcourage e.V. for their valuable feedback. This work has been co-funded by the DFG as part of project C.1 and C.2 within the RTG 2050 “Privacy and Trust for Mobile Users”.