Member since Feb 2003 ·
4447 posts · Location: Germany
Group memberships: Administrators, Members
If you are connected with SSL or TLS and both contacts have their account on the same server then your connection in encrypted and nobody can decrypt your messages.
Not all servers encrypt s2s messages, which means if nth accounts are not on the same servers it's not for sure that the messages are encrypted. If you run your own server you can of course activate a policy which allows only secure connections.
Alex