Zoom meetings aren’t end-to-end encrypted, despite marketing

Post by cyphar » Tue, Mar 31, 2020, 9:51 AM UTC

PudgePacket wrote: post #20

mabcat wrote: post #13

End-to-end encryption has been named as a required feature for telehealth in Australia. Interest in telehealth has gone from zero to infinity over the past two weeks for obvious reasons. So I've been trying really hard to work out if Zoom is E2E, and reached the same conclusions as the article. First, it isn't, and second, Zoom are really going out of their way to obscure that fact. It's great that The Intercept is t…

Hopefully we've reconsidered the laws of mathematics in the last few years ... https://www.newscientist.com/article/2140747-laws-of-mathema... "“The laws of mathematics are very commendable, but the only law that applies in Australia is the law of Australia,” said Turnbull. Turnbull’s comments came as he proposed a new law to force tech companies to give security services access to encrypted messages." "The UK home s…

Post by tony101 » Tue, Mar 31, 2020, 9:53 AM UTC

gtirloni wrote: post #50

tony101 wrote: post #42

Earlier quoted context omitted.

"Zoom... claims to implement end-to-end encryption, widely understood as the most private form of internet communication, protecting conversations from all outside parties. In fact, Zoom is using its own definition of the term, one that lets Zoom itself access unencrypted video and audio from meetings."

That's what the article is saying, not Zoom. Can you point to a Zoom-owned page that says they have e2e video encryption?

Post by jdietrich » Tue, Mar 31, 2020, 9:57 AM UTC

comex wrote: post #30

vmednis wrote: post #16

Earlier quoted context omitted.

GoToMeeting claims end to end encryption[1] and in the same sentence say it's just SSL just like Zoom. Never the less they offer call-in as well so end to end becomes impossible right there. I have serious doubts about any conference software offering real end to end encryption as it's unrealistic for clients to be dealing with that many av streams. 1. https://support.goto.com/meeting/help/security-faqs-g2m05001...

End-to-end encryption doesn't require participants to receive full-quality video from everyone. Each client can be responsible for encoding their own video feed at multiple quality levels simultaneously – what WebRTC calls simulcasting. That does increase required processing power and upload bandwidth, but not to the point of infeasibility. And you do inevitably leak the identity of the person currently talking, as t…

Post by tyingq » Tue, Mar 31, 2020, 10:00 AM UTC

Flimm wrote: post #4

This is not "slightly" dishonest on Zoom's part. It is dishonest. Edit: now that the title has been modified, I feel I need to add back context. Zoom claims to support end-to-end encryption when it doesn't. That is dishonest.

Post by Flimm » Tue, Mar 31, 2020, 10:07 AM UTC

tony101 wrote: post #48

Original title: "Zoom Meetings Aren't End-to-End Encrypted, Despite Misleading Marketing" For some reason, the title was trimmed an hour after submission to omit the "misleading marketing" part. The ranking also appears to have artificially been lowered. Now it is below some other posts that are older and with fewer points.