January 11, 2005 | By Chris Palmer

Two on Skype

I've found two good analyses of the Skype voice over IP (VoIP) software: "An Analysis of the Skype Peer-to-Peer Internet Telephony Protocol," by Salman A. Baset and Henning Schulzrinne, and "VoIP and Skype Security," by Simson Garfinkel.

Skype is software that allows you to make phone calls over the Internet. The concept is that by encrypting voice traffic, Skype can keep your calls private from eavesdroppers. EFF is interested in Skype because of its potential for helping people safeguard their privacy on the Internet.

Everyone who uses or is considering using the software should definitely read the Garfinkel article because it discusses in clear, concrete terms what security and privacy trade-offs Skype users make. More technically oriented readers should also check out the Baset and Schulzrinne article, which is similarly clear and substantiates what Garfinkel only speculates about.

While Skype looks like it could be a useful product for Internet voice communication, keep in mind Garfinkel's warning: "[Because] the Skype protocol is both proprietary and secret, the only sources of information are statements from the company about its security and what can be found by reverse-engineering the software." Even though we have some details about Skype, we don't know everything, and we should act accordingly.

Deeplinks Topics

Stay in Touch

NSA Spying

EFF is leading the fight against the NSA's illegal mass surveillance program. Learn more about what the program is, how it works, and what you can do.

Follow EFF

This #CyberMonday, give the cyber gift of cyber membership with the nonprofit dedicated to your cyber rights: https://supporters.eff.org/sh...

Nov 30 @ 5:06pm

Pakistan's new electronic crimes bill has been called the worst cyber-crime law in the world. Here's why: https://www.eff.org/deeplinks...

Nov 30 @ 4:39pm

The USA Freedom Act's changes to NSA surveillance have gone into effect. Here's what that means so far: https://www.eff.org/deeplinks...

Nov 30 @ 3:54pm
JavaScript license information