[VOIPSEC] Anything new on skype security?

[stuart jacobs]

On Sep 14, 2005, at 8:34 AM, Lee Dilkie wrote:

>
> Robert Moskowitz wrote:
>
>> [...]
>>
>> Sorry, I cannot accept proprietary cyrpto.  I can understand 'patent
>> pending' or such.  But not silence.
>>
>>
>>
>>
> <devil's advocate>
>
> Try asking the military (any military) what their crypto algorithms 
> are?
> Or police, border control, government human resources.. I think you get
> my point.
>
However the military, boarder control and government hr (all 
governmental entities) typically have to go through certification and 
accreditation, usually by NIST or NSA as to the acceptability of 
proposed crypto usage.  So government crypto is not kept secret from 
those with an acknowledged need to know about the algorithms being used

> Silence can be a very effective secure measure. I'm sure SKYPE isn't
> loosing any sleep over your acceptance or not.
>
> </devil's advocate>
>
> It does take the fun out of it though, doesn't it ;)
>
> -lee
>
> _______________________________________________
> Voipsec mailing list
> Voipsec at voipsa.org
> http://voipsa.org/mailman/listinfo/voipsec_voipsa.org
>
>
========================================================
Stuart Jacobs, CISM, CISSP
PMTS - Sr. Technologist
Network Security
Verizon Laboratories
40 Sylvan Road
Waltham MA 02451-1128
(781) 466-3076