Security News > 2020 > August > Zoom Faces More Legal Challenges Over End-to-End Encryption

Video-conferencing behemoth Zoom has been hit with yet another lawsuit stemming from its claim to offer end-to-end encryption for sessions.

Zoom previously said that it offered end-to-end encryption, but that marketing claim came into question after a report from The Intercept said that Zoom's platform actually uses transport layer security encryption, providing only encryption between individual users and service providers instead of encrypting communication directly between the users of a system.

"Zoom repeated its end-to-end encryption claims throughout its website, in white papers-including in its April 2020 HIPAA Compliance Guide-and on the user interface within the app," the suit alleges.

Zoom saw a peak of 300 million daily participants in the quarter, and paying customers have more than tripled.

"Specifically, this lawsuit would only be able to seek damages in the amount of $1,500 per violation, and would only apply to non-business uses of Zoom. But who's actually making a decision to use Zoom over other solutions due to their"end-to-end encryption" that isn't doing it for business purposes? Being in security for over 20 years, I can assure you that an overwhelming majority of decisions made by end-users to use Zoom over competing products was surely based on the features and ease-of-use of the platform, and only an exceedingly few ultra-paranoid, extremist, security zealots like myself would have even considered the level of encryption in place.

News URL

https://threatpost.com/zoom-legal-challenges-end-to-end-encryption/158341/