Shoutbox

Feature Suggestion - Authentication & Encryption - Printable Version

-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Messenger Plus! for Live Messenger (/forumdisplay.php?fid=4)
+---- Forum: WLM Plus! General (/forumdisplay.php?fid=23)
+----- Thread: Feature Suggestion - Authentication & Encryption (/showthread.php?tid=24935)

Feature Suggestion - Authentication & Encryption by stryker on 05-08-2004 at 06:23 AM

I'm sorry if this has been mentioned or suggested before.

I would like to suggest the addition of contact authentication and conversation/file transfer encryption to Msgplus. In this day in age of identity theft, phishing, information theft, etc, no doubt security is a major concern on everyones minds and as such I think such features would be very useful. Msgplus already has log encryption and password protection, why not take Msgplus's security one step further :)
I know there are already several free addons available for messenger that offer such a feature but problem is that the contact you intend to have an secure conversation/file transfer with must also have the addon installed. MsgPlus's large user base would greatly reduce this problem. I'm not sure how easy this would be to implement.

Why the need for authentication and encryption?
It is almost scary how easy it is for someone to listen in on your messenger conversations and/or make themselves a copy of your file transfers. The government, Microsoft, your ISP, your network admin at work/school or even just someone on your network can easily use something like Iris (See this TechTV article for more info) to do so.
This feature would be useful for those living in oppressive countries like China and Iran (no more having to spend your life in prison for being a dissident because you told your friend in the US your locally elected official likes to wear womens underwear), whistleblowers (now you can tell the board of health that the McDonalds you work for uses 1/3 rat meat in its quarter pounder with cheese), generally at work (no more getting busted by your boss because the network admin found out and told him you were considering a position with the competition), generally at home/school (no more your dad messaging you his credit card # so you can put some text books on it and then finding it maxed with porn cause someone was sniffing your convo) etc. No doubt, however, if you part of a sleeper cell wanting to confirm your orders with your commander in Morocco, the NSA/CIA could probably still find out, but with RSA key authentication up to 4096 bits and conversation encryption up to 256 bits using either AES or Twofish it would still make it very hard ;) Consider that standard SSL used when you use PayPal, Internet banking or buy something using your credit card from Amazon is only 128bit "high grade" encryption.

See Secway SimpLite for MSN for more info of the kind of feature I'm suggesting.


RE: Feature Suggestion - Authentication & Encryption by TedoDude on 05-08-2004 at 07:34 AM

I can see the point - and I would only use it if I didn't have to bother to install anything else - (although I do have a 26 MB MSN Messenger Addons Download Folder - as of 1 month ago).

Welcome to the Forums :) (only 1 post) :P


RE: Feature Suggestion - Authentication & Encryption by silid on 06-04-2004 at 10:09 AM

that would be really cool - i am after something like SpyShield (http://www.commandcode.com) from Command Code which only works in MSN Messenger upto version 5. So i have to use windows messenger if I want to use it, or encrypt outside and paste the PGP encrpted message into the message window. and have the receiver decrypt outside.

So my point is on the fly PGP encryption and decryption of messages would be really useful, especially if compatable with SpyShield. Cos then we can send passwords by MSN (H)