Skype security

Skype is a Voice over Internet Protocol (VoIP) system developed by Skype Technologies S.A. It is a peer-to-peer network in which voice calls pass over the Internet rather than through a special purpose network. Skype users search for other users to connect to, enabling them to search other Skype users and send them messages.

Skype uses 256 bit AES encryption to encrypt communication between users, Skype's encryption is inherent in the Skype Protocol and is transparent to callers. Because of this integration the communication between users is considered to be private, although several security concerns exist.

Security policy

The company's Policy includes:

1. Usernames are unique.
2. Callers must present a username and password or other authentication credential.
3. Each caller provides the other with proof of identity and privileges whenever a session is established. Each verifies the other’s proof before the session is allowed to carry messages.
4. Messages transmitted are encrypted from caller to caller. No intermediate node (router) has access to the meaning of these messages.

Implementation and protocols

Registration

Skype holds registration information both on the...
Read More