News for hackers. Stuff that matters.
Re:Zoom End-to-End Encryption Whitepaper by dependenttypes on Wednesday June 17, 2020 @03:35PM (#23555729)
Or... you can instead use a service with actual end-to-end encryption like Jitsi.
Re:Zoom End-to-End Encryption Whitepaper by dougwbrunton on Wednesday June 17, 2020 @03:45PM (#23555840)
Yes!, at the cost of recording, speaker stats, and all participants having a pre-shared secret. Or you could use a peer to peer service that doesn't use a media router, if you have few enough participants.

Insertable streams are coming, along with e2ee through media routers. The Jitsi folks are doing great experiments there, and I'm happy they have taken the lead.

Re:Zoom End-to-End Encryption Whitepaper by dependenttypes on Wednesday June 17, 2020 @04:23PM (#23556278)
> and all participants having a pre-shared secret

This is actually a good thing.

> at the cost of recording

You can use an external application. Inconvenient? Sure, but worth it for e2ee.

Bonus: Unlike your application Jitsi is foss and does not require a centralized account.

Re:Zoom End-to-End Encryption Whitepaper by dougwbrunton on Wednesday June 17, 2020 @04:45PM (#23556514)
I think if I were in your shoes right now I might use a peer to peer video conferencing application that relies on tried and true p2p e2ee (or build one, it's not hard).

Insertable streams are new, and less proven.

An honest question, do you visit sites served by Cloudflare? Is point-to-point encryption okay for your use cases there, or do you have security concerns that require e2ee for your communications?

Re:Zoom End-to-End Encryption Whitepaper by dependenttypes on Wednesday June 17, 2020 @09:13PM (#23558757)
> Is point-to-point encryption okay for your use cases there, or do you have security concerns that require e2ee for your communications?

I would actually be fine even with raw http for said sites.