Web Hosting Talk







View Full Version : Encrypted (SSL) AIM/YIM/ICQ/MSN Discussions


BionhostStan
08-30-2004, 04:22 PM
Hello, I'd like to offer sales/support InstantMessenging for my company, but I'd like to SSL my AIM/ICQ/MSN/YIM convos so that clients can give our agents credit card/bank account/etc. info as well as personal info that they are otherwise scared of sharing without a secured connection/conversation.

(Sometimes, a lock alongside your screen name just makes people WARM & HAPPY inside :)).

The problem is, I have tried http://aimencrypt.com/ but would rather create my own security for the my own protection and on the company's behalf. I would be affraid to use a service provided by some "Doe" to take care of my transactions, etc. I have tested out the (Free) ssl offered by aimencrypt on my personal sn and guess that it works as it should; however, I'd like to be able to get an SSL from an authorized provider and be able to secure my InstantMessengers. Can someone explain how I should do this if I already have an SSL certificate? If I need something besides an SSL certificate please specify what it is I need.

Finally, I was able to SSL my personal AIM client (running on windows) however my "business" (a)IM client is running on linux, called centericq, would I be able to "secure" this client as well? If so.. would somebody explain how? If you have no idea what centericq is, and know how to do this on another linux IM client, please provide information. I'd appreciate it.

Thank You!!!!

Dan L
08-30-2004, 05:14 PM
I believe the only stable way to encrypt is to have both people use, say, Trillian, then have both set encryption to 'ON.'

Also, I'm curious as to why people would send you CC info via a messenger? That data is sensitive, and IMHO no human should come in contact with it, since it's too risky. I would never personally send my CC info over anything other than an SSL'd webpage. In most cases, (hopefully) no one sees the number, and it is just passed through the software.

BigGorilla
08-30-2004, 05:17 PM
It doesn't give you the option of "your own" encrpytion, but one cross platform IM client you could look at is BitWise (http://www.bitwisechat.com). Supports Windows, Mac OS X, and Linux currently. The majority of the encryption methods I've seen that work fairly well are for one platform only (like Trillian).

The bitwise client attempts to do a direct connection to the other client whenever possible and tells you when it is (to cut out sending transmissions through a server, even though they are also still encrypted). I've used it occasionally with my own clients when I've had to share account details with them.

I have no affiliation with Bitwise other than I've been a user of it since their original Alpha testing phase.

BionhostStan
08-30-2004, 06:25 PM
passing CC info is just an example of what I proposed to do. It's a consideration, but nothing written in stone yet.

Also, I wasn't talking about "my own ssl" per say, but an encryption that doesn't say that "this encryption is being used from aimencrypt.com" etc. and I'd also want it from an authorized company.

robgct
08-30-2004, 06:46 PM
You can get a free certificate from thawte.com or sometihng and it will secure your aim connections.

eth00
08-30-2004, 07:42 PM
I know you said CC info was an example but be very careful if you do that, it might be against the rules of your credit card processor. I believe you have to process the cards live or over the phone...not 100% sure on the rule.

BionhostStan
08-30-2004, 07:44 PM
THX eth00, I'll be sure to get in contact with my processor.

xcage: nothing on thawte.com says ANYTHING about IM.

eth00
08-30-2004, 07:47 PM
I thought of something else, you may look into some sort of live chat program based on the webserver. It would be a bit more awkward but I think it would be easy enough to use anyways for most people.

BionhostStan
08-30-2004, 08:04 PM
I know :). I already use phplive, etc.

But for all my gaming customers AIM/ICQ/MSN/YIM is a very popular tool. We like to provide that as well.

BionhostStan
08-31-2004, 09:28 PM
Can anyone else assist?

CD Burnt
08-31-2004, 09:57 PM
might be simpler to use a java chat with encryption. can have folks connect through a browser (internet explorer).

here's an example, I have not tried the encrypted version.

http://www.chatblazer.com/