5 ms·

Will be interesting if Zoom is compelled to disclose their security architecture. On the same page can they be forced, in court, to make a statement on the inte

Will be interesting if Zoom is compelled to disclose their security architecture. On the same page can they be forced, in court, to make a statement on the interference by the Chinese government?

xenonite 7y ago
on the latter issue: a company can not speak for each individual employee.
- xenonite 7y ago
  I don't get why this is downvoted? Maybe I was too concise. Then: even if the company may say what they do, the company cannot check and tell what each employee does. This doesn't have to be a malicious intent of the employee, but it can be.
tensor 7y ago
What interference by the Chinese government?
dontbenebby 7y ago
Is having keys compelled a surprise? Chinese servers, operating in China legally, will usually have this issue. It's serious yes, but I'm confused if it only applied to users in China? I'm more concerned about the technical issues TBH - I assume most software sanctioned in China had to turn over keys.
- fnord123 7y ago
  Seeing as encryption is illegal in China, I don't think they will need to give up any keys.
  - gruez 7y ago
    >Seeing as encryption is illegal in China Source for this? That would make any https site in china illegal.
    - kube-system 7y ago
      Not an expert, but I searched and found this link which seems to explain it well: https://www.freshfields.com/en-us/our-thinking/campaigns/digital/data/china-rules-on-encryption/ https://www.freshfields.com/en-us/our-thinking/campaigns/dig... tl;dr: encryption is not completely illegal, but it sounds like it's pretty tightly controlled.
      - dontbenebby 7y ago
        I didn't think they'd be foolish enough to completely ban it. They're not comically evil, they just have certain incentives. Key escrow meets those goals.
    - fnord123 7y ago
      I'm sorry, I was wrong. It requires a license from the State Encryption Management Commission: http://www.cryptolaw.org/cls2.htm#prc http://www.cryptolaw.org/cls2.htm#prc I am not a lawyer nor a cryptography expert who can advise whether licenses are granted easily or whether they are revoked if you fall out of favour.
bdowling 7y ago
If the lawsuit gets past the pleadings stage, then relevant information would be subject to discovery. So the plaintiffs would be able to get and use that info in court, but Zoom would probably ask the judge for a protective order so that it doesn’t become public.

Will be interesting if Zoom is compelled to disclose their security architecture. On the same page can they be forced, in court, to make a statement on the interference by the Chinese government?

xenonite 7y ago

on the latter issue: a company can not speak for each individual employee.

xenonite 7y ago
I don't get why this is downvoted? Maybe I was too concise. Then: even if the company may say what they do, the company cannot check and tell what each employee does. This doesn't have to be a malicious intent of the employee, but it can be.

tensor 7y ago

What interference by the Chinese government?

dontbenebby 7y ago

Is having keys compelled a surprise? Chinese servers, operating in China legally, will usually have this issue. It's serious yes, but I'm confused if it only applied to users in China? I'm more concerned about the technical issues TBH - I assume most software sanctioned in China had to turn over keys.

fnord123 7y ago
Seeing as encryption is illegal in China, I don't think they will need to give up any keys.
- gruez 7y ago
  >Seeing as encryption is illegal in China Source for this? That would make any https site in china illegal.
  - kube-system 7y ago
    Not an expert, but I searched and found this link which seems to explain it well: https://www.freshfields.com/en-us/our-thinking/campaigns/digital/data/china-rules-on-encryption/ https://www.freshfields.com/en-us/our-thinking/campaigns/dig... tl;dr: encryption is not completely illegal, but it sounds like it's pretty tightly controlled.
    - dontbenebby 7y ago
      I didn't think they'd be foolish enough to completely ban it. They're not comically evil, they just have certain incentives. Key escrow meets those goals.
  - fnord123 7y ago
    I'm sorry, I was wrong. It requires a license from the State Encryption Management Commission: http://www.cryptolaw.org/cls2.htm#prc http://www.cryptolaw.org/cls2.htm#prc I am not a lawyer nor a cryptography expert who can advise whether licenses are granted easily or whether they are revoked if you fall out of favour.

bdowling 7y ago

If the lawsuit gets past the pleadings stage, then relevant information would be subject to discovery. So the plaintiffs would be able to get and use that info in court, but Zoom would probably ask the judge for a protective order so that it doesn’t become public.