4 ms·
Quite easily. They just need to make it so that one of the "ends" is Zoom itself.
by frenchy 6y ago
Quite easily. They just need to make it so that one of the "ends" is Zoom itself.
- kerkeslager 6y agoZoom isn't an end. That's not what "end" means in the context of "end to end".
- frenchy 6y agoIt shouldn't be, but if you don't control the software and the encryption algorithm, there's no reason why zoom couldn't just sign the content so that could evesdrop on everything.
- kerkeslager 6y agoIf you don't have end-to-end encryption, then yes, Zoom can man-in-the-middle your conversation. That is how we know Zoom doesn't have end-to-end encryption. That doesn't mean end-to-end encryption is pointless, if that's what you're implying.
- dependenttypes 6y agoSigning has nothing to do with eavesdropping.
- kerkeslager 6y agoThat's simply not correct. If you don't have authentication you don't have encryption.
- ViViDboarder 6y agoThat’s actually what they did before. They’ve been claiming to have e2ee for a while now and their excuse when caught was just that.