Yes, I realized that. The client doesn't need to be compromised.. the URL detecting occurs as-you-type, so its parsing the message anyway. Wrt monitoring.. the

Yes, I realized that. The client doesn't need to be compromised.. the URL detecting occurs as-you-type, so its parsing the message anyway. Wrt monitoring.. they'd probably send it encrypted if they do this at all