4 ms·
This all seems rather moot: 1. There is no way to verify that you are actually connected to a particular person. i.e. Zoom has no identity management. 2. The
by upofadown 6y ago
This all seems rather moot:
1. There is no way to verify that you are actually connected to a particular person. i.e. Zoom has no identity management.
2. The client is closed source and can't be verified.
3. Zoom can trivially impersonate any participant as they control the servers. They can MITM at will and they won't get caught at it.
This discussion is like talking about the security of the bank vault door when you are planning to make the vault out of drywall.
- sitkack 6y agoNot being E2EE, it doesn't matter what Zoom logs or does or doesn't know, packet captures can definitely record this information. This is basically extortion from Zoom, pay us or information will be in the clear that you probably don't want to be.
- upofadown 6y agoThey encrypt "end point to end point" now. It's just that they have easy access to the keys. I was suggesting that what is being proposed for the paying customers might not have any real value over what they are doing now.