4 ms·
Could we fix the title of this post please? There is a GULF of difference between 'transmit keys through servers in China' and the actual text from the article,
by songshuu 7y ago
Could we fix the title of this post please? There is a GULF of difference between 'transmit keys through servers in China' and the actual text from the article, " We suspect that keys may be distributed through these servers."
Implication is fine, but it should not be declarative without proof.
- dmitrygr 7y agoThe article is quite direct: key directly sent to client in USA directly from a server in china. what is unclear?
- songshuu 7y agoHave read the whole article myself, I did not see that explicitly stated. Could you provide the quote?
- saagarjha 7y ago> In addition, we identify potential areas of concern in Zoom’s infrastructure, including observing the transmission of meeting encryption keys through China.
- songshuu 7y agoThanks! Indeed that was in their opener, but their clarifying statement is broader. FTA "We suspect that keys may be distributed through these servers. A company primarily catering to North American clients that sometimes distributes encryption keys through servers in China is potentially concerning, given that Zoom may be legally obligated to disclose these keys to authorities in China." "We suspect" is not the same as "we are certain".
- gregcoombe 7y agoThey observed keys being transmitted to Chinese servers, which makes them to suspect that Zoom is distributing keys via these servers. They have worded this very carefully to avoid claiming something that they cannot confirm (distribution to multiple users).