{"id":28883,"date":"2020-05-07T15:50:43","date_gmt":"2020-05-07T19:50:43","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=28883"},"modified":"2020-06-03T16:10:01","modified_gmt":"2020-06-03T20:10:01","slug":"zoom-security-improvements","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2020\/05\/07\/zoom-security-improvements\/","title":{"rendered":"Zoom Security Improvements"},"content":{"rendered":"

Zoom<\/a> (via David Heinemeier Hansson<\/a>):<\/p>\n

Zoom 5.0 is here!<\/p>\n

With robust security enhancements and to prepare you for the upcoming transition to GCM encryption.<\/p><\/blockquote>\n\n

Bruce Schneier<\/a>:<\/p>\n

There is nothing in Zoom’s latest announcement about key management. So: while the company has done a really good job improving the security and privacy of their platform, there seems to be just one step remaining to fully encrypt the sessions.<\/p>\n

The other thing I want Zoom to do is to make the security options necessary to prevent Zoombombing to be made available to users of the free version of that platform. Forcing users to pay for security isn’t a viable option right now.<\/p><\/blockquote>\n\n

Eric S. Yuan<\/a> (Hacker<\/a> News<\/a>):<\/p>\n

We are proud to announce the acquisition of Keybase, another milestone in Zoom’s 90-day plan to further strengthen the security of our video communications platform. Since its launch in 2014, Keybase’s team of exceptional engineers has built a secure messaging and file-sharing service leveraging their deep encryption and security expertise. We are excited to integrate Keybase’s team into the Zoom family to help us build end-to-end encryption that can reach current Zoom scalability.<\/p><\/blockquote>\n\n

Dan Moren<\/a>:<\/p>\n

\n

There are, as Yuan points out, drawbacks to implementing that end-to-end encryption, which will be an option for paid accounts, but not mandatory. Namely, certain features won’t be compatible, such as phone bridges and cloud recording (because Zoom can’t decrypt the content).<\/p>\n<\/blockquote>\n\n

Previously:<\/p>\n