A security analysis of the Internet Chess Club

The Internet Chess Club (ICC) is a popular online chess server that started its existence in the early 1990s as the Internet chess server. Although the ICC Web site assures its users that the security protocol employed between the client and the server protects sensitive information, the authors show that this isn't true. This article examines two security aspects of the ICC. In moving from a free service to a commercial one, ICC's administrators introduced several enhancements to the original system, including time-stamping, a network security protocol, and online payments.