Paper short abstract:

This paper suggests a shift from information security as a matter of war to security as matter of care. It explores values that steer the community towards careful and dedicated maintenance practices through an ethnographic case study focused on an old crypto protocol called Pretty Good Privacy.

Paper long abstract:

This paper suggests a shift from information security as a matter of war to security as matter of care. Based on my 6-year long PhD research among a community of open source hackers and developers maintaining a crypto protocol, this paper deconstructs what I call the “warlike crypto imaginary” that often represents cryptography as a fascinating totem pole in the form of a blue lock. This paper tackles the rhetoric of war and violence that shapes our binary understanding of information security and proposes the work of making and unmaking security as a question of care, collaboration and negotiations. In other words, rather than portraying hackers and security experts as lonely teenagers wearing hoodies and deemed to break things, brute force passwords, and penetrate systems, this paper looks at how security people keep collaborating one with another to fixing things that never cease to break.

Inspired by the feminist STS field, I look for a “different voice” (Gilligan, 1982) through an ethnographic case study focused on the maintenance of an old crypto protocol called Pretty Good Privacy (PGP). PGP was developed in 1991 by an antinuclear activist to protect emails from being spied on. Since then, and despite many controversies, different generations of coders have been maintaining this piece of technology for more than three decades. Their persistent, engaged and humble tinkering let me identify values that steer the community towards careful and dedicated practices of maintenance, long-term collaborations, negotiations of compromises, and affective attachment to the technology.