Skype security - Wikipedia, the free encyclopedia

The company's security policy includes:

1. Usernames are unique.
2. Callers must present a username and password or other authentication credential.
3. Each caller provides the other with proof of identity and privileges whenever a session is established. Each verifies the other’s proof before the session is allowed to carry messages.
4. Messages transmitted are encrypted from caller to caller.^{[dubious – discuss]} No intermediate node (router) has access to the meaning of these messages. This claim has been undermined in May 2013 by evidence that Microsoft (owner of Skype) has pinged unique URLs embedded in a Skype conversation;^[4] this could only happen if Microsoft has access to the unencrypted form of these messages.