[anfedorov]

They're encrypted, though, right? Do they need to be sent to this third party to decrypt?

[nwh]

I don't quite remember, but I think the images are just passed over SSL with no other encryption.