4 ms·
> All Zoom users will continue to use AES 256 GCM transport encryption as the default encryption, one of the strongest encryption standards in use today. I’m g
by surround 6y ago
> All Zoom users will continue to use AES 256 GCM transport encryption as the default encryption, one of the strongest encryption standards in use today.
I’m glad that Zoom is finally implementing E2E encryption, but I hate that they have been (and still are) advertising “full encryption” and using jargon like “AES 256 GCM” to deceive users into thinking they’re using anything more than SSL.
- SV_BubbleTime 6y agoWorse than that. Saying AESGCM doesn’t even mean they are using SSL or DH key exchange or etc. it just means they’re using symmetric for the data, that’s all. Nothing about how the key is securely transferred to each side and how the user can have any confidence they aren’t passing the key back to themselves anyhow.
- kayfox 6y agoThey use TLS, they have been using TLS this whole time. This E2E encryption is on top of TLS.
- SV_BubbleTime 6y agoI see, but transferring the AES key directly over TLS is the worst scenario because now you be certain Zoom has it, no?
- 0xy 6y agoThey previously fraudulently advertised "end to end encryption" when it was not. I wouldn't be surprised that they continue to lie.