[VOIPSEC] Skype Security Evaluation

Eva Kuiper evak at telus.net
Tue Oct 25 09:58:32 CDT 2005


Erik,
I assume you mean no end-to-end encryption when the other end is not 
Skype. Right?

I was left wondering if the comparison with WEP and the CRC issue had 
any implications that should cause concern. It was mentioned almost in 
passing and not elaborated upon. I'd like to hear others' thoughts on 
whether or not this should be a concern.

Eva

Erik.Hofmann at infineon.com wrote:

> Nice marketing paper. I should had printed it out as a glossy brochure
> ;-)
> "Paean of praise" is what the dictionary tells me is the right word in
> english. ... like at vendor exhibitions where sales guys with clear
> incentives tell you about how good their product is.
> 
> According to our threat situation (which is different as for a private
> user for example) the fact that there is no end-to-end encryption is
> enough for us to prohibit it within our organisation.
> Other reasons where mentioned here before as I remember.
> 
> Erik 
> 
> 
>>-----Original Message-----
>>From: Voipsec-bounces at voipsa.org 
>>[mailto:Voipsec-bounces at voipsa.org] On Behalf Of Hank Nussbacher
>>Sent: Saturday, October 22, 2005 7:55 PM
>>To: voipsec at voipsa.org
>>Subject: [VOIPSEC] Skype Security Evaluation
>>
>>http://www.skype.net/security/files/2005-031%20security%20evalu
>>ation.pdf
>>
>>-Hank
>>
>>
>>_______________________________________________
>>Voipsec mailing list
>>Voipsec at voipsa.org
>>http://voipsa.org/mailman/listinfo/voipsec_voipsa.org
>>
> 
> 
> _______________________________________________
> Voipsec mailing list
> Voipsec at voipsa.org
> http://voipsa.org/mailman/listinfo/voipsec_voipsa.org
> 




More information about the Voipsec mailing list