Ensure the communication is a feature of Skype. Encryption can not be activated or deactivated. The user is not involved in the encryption process and therefore do not have to deal with issues of public key infrastructure. Skype reportedly uses non-proprietary, widely trusted encryption techniques: RSA key for the negotiation and the Advanced Encryption Standard to encrypt conversations.
Skype provides an uncontrolled registration system for users: registration requires no proof of identity. While this allows users to use the system safely without revealing identities of real life to other users of the system, the lack of authentication means that there is no guarantee that those who are in communication with those who say they are in life real. The downside of this is that it is easy to use personal names (but not identity) of a trusted person as a Skype nickname and trick a naive user into revealing information or executing a program sent to them.

No hay comentarios:
Publicar un comentario