Re: What's up with Skype in Germany?

Peter Pearson <ppearson@xxxxxxxxxxxxxxx> wrote:
Are you claiming that my computer performs no authentication?

To me, it seems likely that the Skype central servers could
impersonate any Skype user. This is in general true for most public key
infrastructures with a trusted authoritity - a certificate authority
can usually impersonate (in some sense) its users, for example, by
forging a certificate with the user's name in it.

http://www.skype.com/security/files/2005-031%20security%20evaluation.pdf .

--
Kristian Gjøsteen
.