UX meeting 20190214

Logistics

Time

17:00-17:30 UTC

Good design, will you be my Valentine? (ok, not really—theme this week was NoScript messaging)

Attending

@redshiftzero, @eloquence, @harrislapiroff, @deeplow, @saptak, @kushal

Place

https://meet.jit.si/QuickWizardsDanceHigh

Agenda

Review NoScript messaging things for asap release: https://github.com/freedomofpress/securedrop-ux/issues/44

Feedback/Discussion

• Nina's overview of the slides shown

  • See pink annotations at top of page
  • See arrows to navigate between pages
  • Design ideas progress from least-impact to highest-impact wrt text & styles changes
    • 2 basic directions presented: Ordered List vs Messaging Bubble
    • First slides cut-paste existing text verbatim, to preserve existing translations work
  • Key Considerations between the two
    • Messaging bubble treatment obvs prioritizes urgency in a pleasing fashion; however, the "message" not going away when a user has changed their settings, is likely to be confusing. Tech realities vs user expectations.
    • Ordered List treatment is dependent on true (vs what we'd prefer) dependencies being shown in ordered priority.
      • The NoScript thing, first; the basic functionality offered by the tool, second; and how we'd like you to use it, third.
  • Additional things explored, tangential to NoScripts bug
    • Blue cloud arrow icon: Cloud semiotics, bad wrt implications for how data storage security does not work, with SD
      • Blue also suggests actionability, which this is not
      • Would like to replace with b/w SD logo, as users are putting things on an org's SecureDrop in this interaction
    • Button Icons: not necessary, visual noise, eliminate
    • Body font: Change font family to something more dense-text screen friendly than Helvetica Neu (which is my personal fav typeface, but it sucks for readability below header size). Google fonts are my personal fav library to pull from (and these mockups use Roboto, Montserrat, and Ariel), and open source—but @harrislapiroff flagged issues with Tor not even being able to use those families, when embedded, on the highest security setting? @kushal or @redshiftzero, any knowledge of this?
    • Encryption: Hide details in hidden Div; most Source users likely do not know what encryption is, or are not existing GPG users. Do we want to force Opsec 101 on this page, or calmly guide use of this page's functionality?
    • Hide/Show Passcode: Spiffier presentation; whole bar clickable, white-on-grey type treatment enhances accessibility with a low-contrast, while also making it more difficult for cameras to legibly capture information from afar

• Feedback