> Unless the remote system (where the video is being received) is untrustworthy Well, that's part of the threat model. There is no need to trust the remote end

> Unless the remote system (where the video is being received) is untrustworthy Well, that's part of the threat model. There is no need to trust the remote end fully, especially since I'm hoping that I can host at Google / OVH / Hetzner / whatever. I trust them as a backup and not to collude with a burglar, but why give them plaintext data? ... To answer my own question, not adding encryption makes life easy I suppose... but that's not very satisfactory imo :)