Security News > 2020 > April > Securing Internet Videoconferencing Apps: Zoom and Others
2020-04-30 15:24
Zoom does offer end-to-end encryption if 1) everyone is using a Zoom app, and not logging in to the meeting using a webpage, and 2) the meeting is not being recorded in the cloud.
The Zoom transport protocol adds Zoom's own encryption scheme to RTP in an unusual way.
The AES key appears to be generated and distributed to the meeting's participants by Zoom servers.
AES 256-bit GCM encryption: Zoom is upgrading to the AES 256-bit GCM encryption standard, which offers increased protection of your meeting data in transit and resistance against tampering.
This provides confidentiality and integrity assurances on your Zoom Meeting, Zoom Video Webinar, and Zoom Phone data.
News URL
https://www.schneier.com/blog/archives/2020/04/secure_internet.html