Re:Jitsi Meet: An open source alternative to Zoom
by surround on Monday March 23, 2020 @10:02PM
(#22671085)
Jitsi meet is not end-to-end encrypted [1]. Rather, it is encrypted with TLS between the client and the server, which doesn’t provide the same security/privacy benefit at all.
The website says it’s “fully encrypted,” which I think is misleading.
[1] https://github.com/jitsi/jitsi-meet/blob/master/README.md#se...
Edit: WebRTC does not support end-to-end encryption for multiple peers. This means it’s impossible for any browser-supported videoconferencing platform to support e2e encryption, including Zoom and Jitsi. This is where Jitsi actually has a unique advantage - it can be self hosted, which offers the same security benefits as e2e encryption.
Re:Jitsi Meet: An open source alternative to Zoom
by emcho on Monday March 23, 2020 @11:03PM
(#22671472)
Signaling is indeed over HTTPS and media is encrypted with DTLS-SRTP.
No browsers today support end-to-end encryption for multiparty calls.
The advantage that Jitsi offers there is that you can stand it up on your own server in just a few minutes and get protection that is equivalent to end-to-end encryption.
On top of that it's open source and end to end encrypted.
Disclaimer: no affiliation, just a happy user.