I’ve known about security concerns related to Skype for quite some time, but I never really understood the details. Thanks to this letter, signed by a large number of organizations and individuals, I now know quite a bit more. For those as ignorant as me on this topic, here is some background:
In June 2008, Skype stated it could not eavesdrop on user conversations due to its peer-to-peer architecture and encryption techniques. Additionally, Skype claimed it was not required to comply with expanded CALEA rules on lawful interception as long as it was based in Europe. As a result of the service being acquired by Microsoft in 2011, it may now be required to comply with CALEA due to the company being headquartered in Redmond, Washington. Furthermore, as a US-based communication provider, Skype would therefore be required to comply with the secretive practice of National Security Letters.
Since Skype was acquired by Microsoft, both entities have refused to answer questions about exactly what kinds of user data can be intercepted, what user data is retained, or whether eavesdropping on Skype conversations may take place. In 2012, the FBI stated that it had issued a warrant for chats going back to 2007, and that it had utilized those chats as evidence as the basis for criminal charges. This contradicts Skype’s own policy stating that chats are retained for a maximum of 30 days.
The letter begins as follows:
Donate bitcoins: 35DBUbbAQHTqbDaAc5mAaN6BqwA2AxuE7G
Follow me on Twitter.
