The Road to End-to-End Encryption
summary
Zoom publishes a GitHub white paper, prototypes a first end‑to‑end encrypted meeting, and ships E2E to paid and free users in Oct 2020 release. Phase one uses leader‑generated meeting keys distributed with ephemeral Diffie‑Hellman and device identity signing keys, audio/video encrypted with AES‑GCM, and a UI security code plus heartbeats every 10 seconds to detect hidden joins; Lock Meeting prevents late injects. Roadmap adds TOFU across multiple devices, encrypted synced contact histories, signature chains and VRF transparency tree, and IDP attestations via OAuth2.
AI-written summary · about
chapters (18)
- 0:00Intro
- 0:13Overview
- 2:34What can go wrong
- 4:24Onprem solution
- 5:58Encryption at Zoom
- 11:59Man in the Middle
- 13:34Lock the Meeting
- 14:08Better Identity
- 15:59Security Upgrade Example
- 18:18How do we build it
- 20:08Revoking devices
- 20:27Contact sync
- 22:13Signature chains
- 26:38verifiable random functions
- 27:26identity provider attestation
- 29:26Recap
- 30:29Summary
- 31:36Thank you
related talks
24mEnd-to-End encryption for iOS Developer
50mBuilding Production-Grade End to End Encrypted App...
01h 07mBuilding Rock-Solid Encrypted Applications
05mEnd to End Encryption for Mobile Developers
40mEnd-to-end encryption: Behind the scenes
20mData Protection & Privacy Issues on Video Conferencing
17mGroup Call End-to-End Encryption and the Challenges of Encrypting Large Calls
41mEnd to End Encryption with Elixir and Beam