3 ms·

Relevant to say Zoom has responded to this. https://blog.zoom.us/wordpress/2020/04/01/facts-around-zoom-encryption-for-meetings-webinars/ https://blog.zoom.us/

Relevant to say Zoom has responded to this. https://blog.zoom.us/wordpress/2020/04/01/facts-around-zoom-encryption-for-meetings-webinars/ https://blog.zoom.us/wordpress/2020/04/01/facts-around-zoom-... "In light of recent interest in our encryption practices, we want to start by apologizing for the confusion we have caused by incorrectly suggesting that Zoom meetings were capable of using end-to-end encryption." And "To be clear, in a meeting where all of the participants are using Zoom clients, and the meeting is not being recorded, we encrypt all video, audio, screen sharing, and chat content at the sending client, and do not decrypt it at any point before it reaches the receiving clients." As others have said, the moment you have to interact with the public phone system, decryption has to happen before the "end".

basch 7y ago
I asked this the other day >Am I misunderstanding the product, or are the streams not being merged on the server into a single feed? Are they not recompressing streams depending on the receiving device? I find that somewhat unbelievable? Its interesting if what they say is true. Each device encodes their feed exactly once, and then when you are on a call with 50 people, you are receiving 50 separate encrypted feeds, which your client all decrypts separately? With one common key for the whole meeting, and the server has the ability to decrypt for ptsn and recordings, it just chooses not to when those features are not used?
bad_user 7y ago
No, that's not a clarification. What the TFA is saying is that the decryption key is generated by their servers and even passed through China, even if none of the people in the conversation are in China. That's NOT end-to-end encryption, Zoom never does end-to-end encryption because they have the decryption keys. And with that clarification they keep deceiving their users.

basch 7y ago

I asked this the other day >Am I misunderstanding the product, or are the streams not being merged on the server into a single feed? Are they not recompressing streams depending on the receiving device? I find that somewhat unbelievable? Its interesting if what they say is true. Each device encodes their feed exactly once, and then when you are on a call with 50 people, you are receiving 50 separate encrypted feeds, which your client all decrypts separately? With one common key for the whole meeting, and the server has the ability to decrypt for ptsn and recordings, it just chooses not to when those features are not used?

bad_user 7y ago

No, that's not a clarification. What the TFA is saying is that the decryption key is generated by their servers and even passed through China, even if none of the people in the conversation are in China. That's NOT end-to-end encryption, Zoom never does end-to-end encryption because they have the decryption keys. And with that clarification they keep deceiving their users.