News for hackers. Stuff that matters.
Re:Jitsi Meet: An open source alternative to Zoom by surround on Monday March 23, 2020 @10:02PM (#22671085)
Jitsi meet is not end-to-end encrypted [1]. Rather, it is encrypted with TLS between the client and the server, which doesn’t provide the same security/privacy benefit at all.

The website says it’s “fully encrypted,” which I think is misleading.

[1] https://github.com/jitsi/jitsi-meet/blob/master/README.md#se...

Edit: WebRTC does not support end-to-end encryption for multiple peers. This means it’s impossible for any browser-supported videoconferencing platform to support e2e encryption, including Zoom and Jitsi. This is where Jitsi actually has a unique advantage - it can be self hosted, which offers the same security benefits as e2e encryption.

Re:Jitsi Meet: An open source alternative to Zoom by emcho on Monday March 23, 2020 @11:03PM (#22671472)
Signaling is indeed over HTTPS and media is encrypted with DTLS-SRTP. No browsers today support end-to-end encryption for multiparty calls. The advantage that Jitsi offers there is that you can stand it up on your own server in just a few minutes and get protection that is equivalent to end-to-end encryption.
Re:Jitsi Meet: An open source alternative to Zoom by surround on Tuesday March 24, 2020 @12:17AM (#22671867)
Coincidentally, the edit I made to my comment is nearly identical to your comment. But now I’m outside the 1 hour window of being able to edit.