Simple corporate security tip: disable Skype API and File Transfer
Skype security has been a hot button for Skype bashers and players in the media since Skype published their security white paper.
Security is more than just end-to-end encryption as security expert Michael Gough pointed out in these pages on October 24.
Bill, I would add that it is safe to say "a company needs to look at their company security policies and how a company would use Skype, but in my professional opinion, the way Skype has implemented security and encryption should fulfill many companies’ requirements for a secure voice client solution. It all depends on how it will fit into your network infrastructure and fulfill their business needs for each particular company as far as how to use Skype effectively.
Part of what Michael is alluding to in using Skype effectively are enforcing policies for use of the Skype API or the use of Skype File Transfer function.
Both these functions can be independently disabled in latest Windows Skype Version 1.4.0.84. It is not all that well known that you can do this.
But I found it on the Skype Forum and spent some time today testing it.
You need to make a simple addition to the computer registry.
Here is a script that will disable the API Download file
and another that will disable File Transfer Download file.
You can read the script using NotePad. If you rename the file to be dot reg instead of dot txt it will execute and make the appropriate changes to the registry.
Remember to create a restore point before you make changes to the registry.


Comments
with those two registry entries, security administrators can add them into "group policy" to manage SKYPE. they are of great help to Skype to enterprise networks.
Posted by: Richard | November 14, 2005 10:54 PM
Hi,
Tried doing changes in registry for file transfer but it somehow didn't worked. Iam using SKype ver. 1.4.0.84
Posted by: Cyprian | December 4, 2005 08:49 PM
Hi,
registry file didnt worked out.... any clue...
Posted by: MWGP | December 14, 2005 09:40 AM
Skype is downloaded to my computer, but can't register. No screen comes up to register. Therefore I can't sign in to use Skype.
Thanks for your help.
Posted by: Judy Gayle | April 24, 2006 10:35 AM