What’s the security for instant messaging?
Apparently, not a lot. As seems often the case the pressure is on to deliver a system that works at all, long before one that might be secure. This is part of a much bigger problem that security can’t be put on after the product has been built. If you think about it, how would you add security to your car after it’s been built? The answers are pretty tacky, crude and ineffectual. The quickest way to get some security into instant messaging would be to secure the content of the message outside the product, and then drop the secured content into the product for transmission. Not pretty but certainly workable. Meantime increase the pressure on vendors to deliver systems with the security architected into them from the beginning.
