4 ms·
Not a security expert but deal with PKI (openssl, openssh, etc) / OpenGPG/GnuPG a lot on a daily basis, I just don't understand why Zoom would let their marketi
by terrywang 6y ago
Not a security expert but deal with PKI (openssl, openssh, etc) / OpenGPG/GnuPG a lot on a daily basis, I just don't understand why Zoom would let their marketing people put buzzword like `GCM Encryption` on such an important landing page, not nitpicking, seriously...
At least, use AES-256 (mode can be optional as most people don't even know what GCM XTS CBC stands for).
- DonHopkins 6y agoBecause focus groups liked the sound of "GCM Encryption". Be glad they didn't slap on a bunch of Trim Level Designators like "GCM LX Sport Encryption CE". https://www.liveabout.com/glx-gls-se-si-lx-what-do-they-mean-4083747 https://www.liveabout.com/glx-gls-se-si-lx-what-do-they-mean... https://en.wikipedia.org/wiki/Trim_level_(automobile) https://en.wikipedia.org/wiki/Trim_level_(automobile)
- tatersolid 6y agoI think because the big failing before was that Zoom was using AES, but was using it in ECB mode. Zoom clearly paid near-zero attention to security until recently. So by saying “GCM encryption” they’re highlighting that the fixed the mode by which they are using AES encryption.