ANALYZING USER TRADEOFFS FOR ENCRYPTED EMAIL SERVICES