[rapnie]

Yes, I realized that. The client doesn't need to be compromised.. the URL detecting occurs as-you-type, so its parsing the message anyway.

Wrt monitoring.. they'd probably send it encrypted if they do this at all