Brokerage Instant Messages Must Be Saved

DrEnter writes "According to an AP story on Yahoo!, the National Association of Securities Dealers (NASD) has told its members that they must keep a copy of all instant messages sent or received by employees for at least three years. This is similar to their requirements on keeping e-mail, although technically not nearly as easy. The NASD is a self-regulatory organization, and U.S. federal law requires almost all of the 5,300 U.S.-based securities firms and brokerages to be a member of it. There's a news release from the NASD concerning the requirement - it looks like the daunting technical issues have already resulted in some firms banning the use of IM completely."

Comments

Re:Jabber: All message go through server

[axxackall]

The major question I keep asking about Jabber's server-side logging is: if the server logs all messages and they are encrypted with some keys, then where are those keys to decrypt them? What's the guarantee that they logged on the server secure enough? And what's the chance that the court will still have the access to those keys in order to decrypt the messages?