3 ms·
The web app runs on TCP/443 and benefits from your Let's Encrypt cert. Jitsi also exposes UDP/10000 for receiving streams from clients, which doesn't go through
by kardos 7y ago
The web app runs on TCP/443 and benefits from your Let's Encrypt cert. Jitsi also exposes UDP/10000 for receiving streams from clients, which doesn't go through apache/nginx. So what does it do for encryption there?
- joecot 7y agoFair enough. I just firewalled 10000 and tried talking to a friend and it does not work. The web app indeed runs over 443 but all the video conferencing is done over UDP. However WebRTC is always encrypted. So add on a 4th well tested piece of tech being utilized. https://webrtc-security.github.io/ https://webrtc-security.github.io/
- kardos 7y agoYeah, I'm not really suggesting that they failed entirely to encrypt the UDP traffic. But I am curious if what they have done has been scrutinized recently. Jitsi was formed in 2003 according to Wikipedia, there could be outdated choices in there somewhere. That they use widely deployed tech is not really enough, we've just seen that Zoom is using ECB mode when they should not, etc.