News for hackers. Stuff that matters.

A comment on The facts around Zoom and encryption for meetings/webinars. Parent comment

Re:The facts around Zoom and encryption for meetings/webinars by swixmix on Thursday April 02, 2020 @10:51AM (#22759630)
Doesn't Jitsi have the same problem? The solution is the same: Run your own server. End to end encrypted videoconferencing does not scale easily without a server.

> Is Jitsi Meet end-to-end encrypted? #409

> ... "yes, https://meet.jit.si/ encrypts the communication, only the two clients and our server has access to them". ... [1]

[1]: https://github.com/jitsi/jitsi-meet/issues/409

[ Parent | on HN ]
Re:The facts around Zoom and encryption for meetings/webinars by ahendriksen on Thursday April 02, 2020 @11:49AM (#22760304)
To me, this quote gave the impression that Jitsi developers similarly (and falsely) claim that it is end-to-end encrypted:

> Is Jitsi Meet end-to-end encrypted? #409

> ... "yes, https://meet.jit.si/ encrypts the communication, only the two clients and our server has access to them". ... [1]

In fact, "yes, .. " is an answer to the question "is it reasonable to use Jitsi Meet from an untrusted wifi network?". It was written by a user of Jitsi and not one of the developers.

A developer answers "when talking on meet.jit.si your stream is encrypted on the network but decrypted on the machine that hosts the bridge."

[ Parent | on HN ]
Re:The facts around Zoom and encryption for meetings/webinars by f38zf5vdt on Thursday April 02, 2020 @10:58AM (#22759736)
Yes... but in one case the software is entirely FOSS and readily deployable via a docker image. The Zoom server is not FOSS, or even accessible through their GitHub.

https://github.com/jitsi/docker-jitsi-meet

[ Parent | on HN ]
Re:The facts around Zoom and encryption for meetings/webinars by swixmix on Thursday April 02, 2020 @11:54AM (#22760352)
Right. Let's assume I refuse to take on the responsibility of a videoconferencing server. What are my options to get Jitsi Meet? Can I pay a company to set up and maintain it? Or do I have to hunt for a videoconferencing engineer?
[ Parent | on HN ]
Re:The facts around Zoom and encryption for meetings/webinars by f38zf5vdt on Thursday April 02, 2020 @12:11PM (#22760546)
It's free if you use their servers (https://meet.jit.si/), but then you're back to square one in that you don't own the encryption keys.

Scaleway shows how easy it is to configure and deploy on a cloud host:

https://www.scaleway.com/en/docs/deploy-jitsi-meet-with-dock...

Whether or not your cloud hosting is secure is a separate issue altogether. :)

I'm not saying that it's E2EE on Jitsi either, but at least the implementation is transparent.

[ Parent | on HN ]